beautypg.com

3 ike setup – ZyXEL Communications P-335WT User Manual

Page 404

background image

P-335 Series User’s Guide

404

Chapter 39 VPN/IPSec Setup

39.3 IKE Setup

To edit this menu, the Key Management field in Menu 27.1.1 – IPSec Setup must be set to
IKE
. Move the cursor to the Edit Key Management Setup field in Menu 27.1.1 – IPSec
Setup
; press [SPACE BAR] to select Yes and then press [ENTER] to display Menu 27.1.1.1
– IKE Setup
.

Enable Replay
Detection

As a VPN setup is processing intensive, the system is vulnerable to Denial of Service
(DoS) attacks The IPSec receiver can detect and reject old or duplicate packets to pro-
tect against replay attacks. Enable replay detection by setting this field to Yes.
Press [SPACE BAR] to select Yes or No. Choose Yes and press [ENTER] to enable
replay detection.

Key
Management

Press [SPACE BAR] to choose either IKE or Manual and then press [ENTER]. Manual
is useful for troubleshooting if you have problems using IKE key management.

Edit Key
Management
Setup

Press [SPACE BAR] to change the default No to Yes and then press [ENTER] to go to
a key management menu for configuring your key management setup (described
later). If you set the Key Management field to IKE, this will take you to Menu 27.1.1.1
– IKE Setup
. If you set the Key Management field to Manual, this will take you to
Menu 27.1.1.2 – Manual Setup.

When you have completed this menu, press [ENTER] at the prompt “Press ENTER to Confirm…” to
save your configuration, or press [ESC] at any time to cancel.

Table 141 Menu 27.1.1 IPSec Setup

FIELD

DESCRIPTION