ZyWALL 2 Series User’s Guide

Table 37-2 Menu 27.1.1: IPSec Setup

FIELD

DESCRIPTION

EXAMPLE

 

 

 

Local

Local IP addresses must be static and correspond to the remote IPSec

 

 

router's configured remote IP addresses.

 

 

Two active SAs can have the same configured local or remote IP address,

 

 

but not both. You can configure multiple SAs between the same local and

 

 

remote IP addresses, as long as only one is active at any time.

 

 

In order to have more than one active rule with the Secure Gateway

 

 

Address field set to 0.0.0.0, the ranges of the local IP addresses cannot

 

 

overlap between rules.

 

 

If you configure an active rule with 0.0.0.0 in the Secure Gateway

 

 

Address field and the LAN’s full IP address range as the local IP address,

 

 

then you cannot configure any other active rules with the Secure Gateway

 

 

Address field set to 0.0.0.0.

 

Addr Type

Press [SPACE BAR] to choose SINGLE, RANGE, or SUBNET and press

SINGLE

 

[ENTER]. Select SINGLE with a single IP address. Select RANGE for a

 

 

specific range of IP addresses. Select SUBNET to specify IP addresses on

 

 

a network by their subnet mask.

 

 

 

 

IP Addr Start

When the Addr Type field is configured to Single, enter a static IP

192.168.1.35

 

address on the LAN behind your ZyWALL.

 

 

When the Addr Type field is configured to Range, enter the beginning

 

 

(static) IP address, in a range of computers on your LAN behind your

 

 

ZyWALL.

 

 

When the Addr Type is configured to SUBNET, this is a (static) IP

 

 

address on the LAN behind your ZyWALL.

 

 

 

 

End/Subnet

When the Addr Type field is configured to Single, this field is N/A.

192.168.1.38

Mask

When the Addr Type field is configured to Range, enter the end (static) IP

 

 

address, in a range of computers on the LAN behind your ZyWALL.

 

 

When the Addr Type field is configured to SUBNET, this is a subnet mask

 

 

on the LAN behind your ZyWALL.

 

 

 

 

Port Start

0 is the default and signifies any port. Type a port number from 0 to 65535.

0

 

You cannot create a VPN tunnel if you try to connect using a port number

 

 

that does not match this port number or range of port numbers.

 

 

Some of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80,

 

 

HTTP; 25, SMTP; 110, POP3

 

VPN/IPSec Setup

37-9