3 ike setup – ZyXEL Communications P-335WT User Manual
Page 404
P-335 Series User’s Guide
404
Chapter 39 VPN/IPSec Setup
39.3 IKE Setup
To edit this menu, the Key Management field in Menu 27.1.1 – IPSec Setup must be set to
IKE. Move the cursor to the Edit Key Management Setup field in Menu 27.1.1 – IPSec
Setup; press [SPACE BAR] to select Yes and then press [ENTER] to display Menu 27.1.1.1
– IKE Setup.
Enable Replay
Detection
As a VPN setup is processing intensive, the system is vulnerable to Denial of Service
(DoS) attacks The IPSec receiver can detect and reject old or duplicate packets to pro-
tect against replay attacks. Enable replay detection by setting this field to Yes.
Press [SPACE BAR] to select Yes or No. Choose Yes and press [ENTER] to enable
replay detection.
Key
Management
Press [SPACE BAR] to choose either IKE or Manual and then press [ENTER]. Manual
is useful for troubleshooting if you have problems using IKE key management.
Edit Key
Management
Setup
Press [SPACE BAR] to change the default No to Yes and then press [ENTER] to go to
a key management menu for configuring your key management setup (described
later). If you set the Key Management field to IKE, this will take you to Menu 27.1.1.1
– IKE Setup. If you set the Key Management field to Manual, this will take you to
Menu 27.1.1.2 – Manual Setup.
When you have completed this menu, press [ENTER] at the prompt “Press ENTER to Confirm…” to
save your configuration, or press [ESC] at any time to cancel.
Table 141 Menu 27.1.1 IPSec Setup
FIELD
DESCRIPTION