ZyXEL Communications ADSL VoIP IAD with 802.11g Wireless 2602HW Series - Manual (Page 203)

Prestige 2602HW Series User’s Guide
Chapter 17 VPN Screens 203
• If the WAN connection goes down, the Prestige uses the dial backup IP address for the
VPN tunnel when using dial backup or the LAN IP address when using traffic redirect.
See the chapter on WAN for details on dial backup and traffic redirect.
17.4 Secure Gateway Address
Secure Gateway Address is the WAN IP address or domain name of the remote IPSec router
(secure gateway).
If the remote secure gateway has a static WAN IP address, enter it in the Secure Gateway
Address field. You may alternatively enter the remote secure gateway’s domain name (if it
has one) in the Secure Gateway Address field.
You can also enter a remote secure gateway’s domain name in the Secure Gateway Address
field if the remote secure gateway has a dynamic WAN IP address and is using DDNS. The
Prestige has to rebuild the VPN tunnel each time the remote secure gateway’s WAN IP
address changes (there may be a delay until the DDNS servers are updated with the remote
gateway’s new WAN IP address).
17.4.1 Dynamic Secure Gateway Address
If the remote secure gateway has a dynamic WAN IP address and does not use DDNS, enter
0.0.0.0 as the secure gateway’s address. In this case only the remote secure gateway can
initiate SAs. This may be useful for telecommuters initiating a VPN tunnel to the company
network (see
Section 17.18 on page 225 for configuration examples).
The Secure Gateway IP Address may be configured as 0.0.0.0 only when using IKE key
management and not Manual key management.
17.5 VPN Summary Screen
The following figure helps explain the main fields in the web configurator.
Figure 85 IPSec Summary Fields
Local and remote IP addresses must be static.