beautypg.com

3 my ip address, 4 secure gateway address, 3 my ip address 14.4 secure gateway address – ZyXEL Communications P-2802H(W)(L)-I Series User Manual

Page 186: Table 70 ah and esp

background image

Chapter 14 VPN Screens

P-2802H(W)(L)-I Series User’s Guide

186

14.3 My IP Address

My IP Address is the WAN IP address of the ZyXEL Device. The ZyXEL Device has to
rebuild the VPN tunnel if My IP Address changes after setup.
The following applies if this field is configured as 0.0.0.0:

• The ZyXEL Device uses the current ZyXEL Device WAN IP address (static or dynamic)

to set up the VPN tunnel.

• If the WAN connection goes down, the ZyXEL Device uses the dial backup IP address for

the VPN tunnel when using dial backup or the LAN IP address when using traffic redirect.
See

Chapter 6 on page 83

for details on dial backup and traffic redirect.

14.4 Secure Gateway Address

Secure Gateway Address is the WAN IP address or domain name of the remote IPSec router
(secure gateway).

Table 70 AH and ESP

ESP

AH

ENCRYPTION

DES (default)
Data Encryption Standard (DES) is a widely

used method of data encryption using a

private (secret) key. DES applies a 56-bit key

to each 64-bit block of data.

MD5 (default)
MD5 (Message Digest 5) produces a 128-bit

digest to authenticate packet data.

3DES
Triple DES (3DES) is a variant of DES, which

iterates three times with three separate keys

(3 x 56 = 168 bits), effectively doubling the

strength of DES.

SHA1
SHA1 (Secure Hash Algorithm) produces a

160-bit digest to authenticate packet data.

AES
Advanced Encryption Standard is a newer

method of data encryption that also uses a

secret key. This implementation of AES

applies a 128-bit key to 128-bit blocks of

data. AES is faster than 3DES.

Select NULL to set up a phase 2 tunnel

without encryption.

AUTHENTICATION

MD5 (default)
MD5 (Message Digest 5) produces a 128-bit

digest to authenticate packet data.

MD5 (default)
MD5 (Message Digest 5) produces a 128-bit

digest to authenticate packet data.

SHA1
SHA1 (Secure Hash Algorithm) produces a

160-bit digest to authenticate packet data.

SHA1
SHA1 (Secure Hash Algorithm) produces a

160-bit digest to authenticate packet data.

Select MD5 for minimal security and SHA1 for maximum security.