ZyXEL Communications ZyWALL 2 Series Table 14-9VPN Manual Setup

ZyWALL 2 Series User’s Guide

The following table describes the labels in this screen.

	Table 14-9 VPN Manual Setup
LABEL	DESCRIPTION
Active	Select this check box to activate this VPN policy.
Name	Type up to 32 characters to identify this VPN policy. You may use any character,
	including spaces, but the ZyWALL drops trailing spaces.
Key Management	Select IKE or Manual Key (or Manual) from the drop-down list box. Manual Key is a
	useful option for troubleshooting if you have problems using IKE key management.

Local:

Local IP addresses must be static and correspond to the remote IPSec router's configured remote IP addresses.

Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the same local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time.

Client to Site	Select this radio button to build a client to site VPN connection.
Local IP Address	Enter a static local IP address. The local IP address must correspond to the remote
	IPSec router's configured remote IP addresses.
Site to Site	Select this radio button to establish a VPN between two sites (groups of IP
	addresses).
Address Type	Use the drop-down list box to choose Range Address or Subnet Address. Select
	Range Address for a specific range of IP addresses. Select Subnet Address to
	specify IP addresses on a network by their subnet mask.
Starting IP	When the Address Type field is configured to Range Address, enter the beginning
Address	(static) IP address, in a range of computers on the LAN behind your ZyWALL. When
	the Address Type field is configured to Subnet Address, this is a (static) IP address
	on the LAN behind your ZyWALL.
Ending IP	When the Address Type field is configured to Range Address, enter the end (static)
Address/Subnet	IP address, in a range of computers on the LAN behind your ZyWALL. When the
Mask	Address Type field is configured to Subnet Address, this is a subnet mask on the
	LAN behind your ZyWALL.

14-30 VPN Screens