ZyXEL Communications ZyXEL ZyAIR 100 User Manual
Page 218

ZyWALL 10~100 Series Internet Security Gateway
15-12
VPN
Screens
Table 15-7 VPN IKE
LABEL DESCRIPTION
End/ Subnet Mask When the Address Type field is configured to Single Address, this field is N/A.
When the Address Type field is configured to Range Address, enter the end (static)
IP address, in a range of computers on the LAN behind your ZyWALL. When the
Address Type field is configured to Subnet Address, this is a subnet mask on the
LAN behind your ZyWALL.
Remote
Remote IP addresses must be static and correspond to the remote IPSec router's
configured local IP addresses. The remote fields do not apply when the Secure
Gateway Addr field is configured to 0.0.0.0. In this case only the remote IPSec
router can initiate the VPN.
Two active SAs cannot have the local and remote IP address(es) both the same.
Two active SAs can have the same local or remote IP address, but not both. You can
configure multiple SAs between the same local and remote IP addresses, as long as
only one is active at any time.
Address Type
Use the drop-down menu to choose Single Address, Range Address, or Subnet
Address. Select Single Address with a single IP address. Select Range Address
for a specific range of IP addresses. Select Subnet Address to specify IP addresses
on a network by their subnet mask.
IP Address Start
When the Address Type field is configured to Single Address, enter a (static) IP
address on the network behind the remote IPSec router. When the Addr Type field is
configured to Range Address, enter the beginning (static) IP address, in a range of
computers on the network behind the remote IPSec router. When the Address Type
field is configured to Subnet Address, enter a (static) IP address on the network
behind the remote IPSec router.
End / Subnet
Mask
When the Address Type field is configured to Single Address, this field is N/A.
When the Address Type field is configured to Range Address, enter the end (static)
IP address, in a range of computers on the network behind the remote IPSec router.
When the Address Type field is configured to Subnet Address, enter a subnet
mask on the network behind the remote IPSec router.
Local ID Type
Select IP to identify this ZyWALL by its IP address.
Select DNS to identify this ZyWALL by a domain name.
Select E-mail to identify this ZyWALL by an e-mail address.