beautypg.com

ZyXEL Communications ZyXEL ZyWALL 5 User Manual

Page 247

background image

ZyWALL 5 User’s Guide

246

Chapter 14 VPN Screens

Local Network

Local IP addresses must be static and correspond to the remote IPSec router's

configured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same.

Two active SAs can have the same local or remote IP address, but not both. You

can configure multiple SAs between the same local and remote IP addresses, as

long as only one is active at any time.

Address Type

Use the drop-down list box to choose Single Address, Range Address, or

Subnet Address. Select Single Address for a single IP address. Select Range

Address for a specific range of IP addresses. Select Subnet Address to specify

IP addresses on a network by their subnet mask.

Starting IP

Address

When the Address Type field is configured to Single Address, enter a (static) IP

address on the LAN behind your ZyWALL. When the Address Type field is

configured to Range Address, enter the beginning (static) IP address, in a range

of computers on the LAN behind your ZyWALL. When the Address Type field is

configured to Subnet Address, this is a (static) IP address on the LAN behind your

ZyWALL.

Ending IP

Address/Subnet

Mask

When the Address Type field is configured to Single Address, this field is N/A.

When the Address Type field is configured to Range Address, enter the end

(static) IP address, in a range of computers on the LAN behind your ZyWALL.

When the Address Type field is configured to Subnet Address, this is a subnet

mask on the LAN behind your ZyWALL.

Remote Network

Remote IP addresses must be static and correspond to the remote IPSec router's

configured local IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same.

Two active SAs can have the same local or remote IP address, but not both. You

can configure multiple SAs between the same local and remote IP addresses, as

long as only one is active at any time.

Address Type

Use the drop-down list box to choose Single Address, Range Address, or

Subnet Address. Select Single Address with a single IP address. Select Range

Address for a specific range of IP addresses. Select Subnet Address to specify

IP addresses on a network by their subnet mask.

Starting IP

Address

When the Address Type field is configured to Single Address, enter a (static) IP

address on the network behind the remote IPSec router. When the Addr Type field

is configured to Range Address, enter the beginning (static) IP address, in a

range of computers on the network behind the remote IPSec router. When the

Address Type field is configured to Subnet Address, enter a (static) IP address

on the network behind the remote IPSec router.

Ending IP

Address/Subnet

Mask

When the Address Type field is configured to Single Address, this field is N/A.

When the Address Type field is configured to Range Address, enter the end

(static) IP address, in a range of computers on the network behind the remote

IPSec router. When the Address Type field is configured to Subnet Address,

enter a subnet mask on the network behind the remote IPSec router.

Gateway Policy

Information

Table 72 VPN Rules (Manual) Edit (continued)

LABEL

DESCRIPTION