ZyWALL 2 Series User’s Guide

 

Table 14-7 Basic IKE VPN Rule Edit

 

 

LABEL

DESCRIPTION

 

 

Local ID Type

Select IP to identify this ZyWALL by its IP address.

 

Select DNS to identify this ZyWALL by a domain name.

 

Select E-mailto identify this ZyWALL by an e-mail address.

 

You do not configure the local ID type and content when you set Authentication Method

 

to Certificate. The ZyWALL takes them from the certificate you select.

 

 

Content

When you select IP in the Local ID Type field, type the IP address of your computer in the

 

local Content field. The ZyWALL automatically uses the IP address in the My IP Address

 

field (refer to the My IP Address field description) if you configure the local Content field

 

to 0.0.0.0 or leave it blank.

 

It is recommended that you type an IP address other than 0.0.0.0 in the local Content field

 

or use the DNS or E-mailID type in the following situations.

 

When there is a NAT router between the two IPSec routers.

 

When you want the remote IPSec router to be able to distinguish between VPN

 

connection requests that come in from IPSec routers with dynamic WAN IP

 

addresses.

 

When you select DNS or E-mailin the Local ID Type field, type a domain name or e-mail

 

address by which to identify this ZyWALL in the local Content field. Use up to 31 ASCII

 

characters including spaces, although trailing spaces are truncated. The domain name or

 

e-mail address is for identification purposes only and can be any string.

 

 

VPN Screens

14-17