![background image](http://html1.mh-extra.com/html/zyxel-communications/atp200/atp200_user-manual_943710283.webp)
Chapter 9 Interfaces
ZyWALL ATP Series User’s Guide
283
9.9.1 Restrictions for IPSec Virtual Tunnel Interface
• IPv4 traffic only
• IPSec tunnel mode only. A shared keyword must not be configured when using tunnel mode.
• With a VTI VPN you do not add local or remote LANs to your VPN configuration.
• For a VTI VPN you should only have one local and one remote WAN.
• A dynamic peer is not supported
• The IPSec VTI is limited to IP unicast and multicast traffic only.
9.9.2 VTI Screen
To access this screen, click
Configuration > Network > Interface > VTI
.
Figure 195
Configuration > Network > Interface > VTI
The following table describes the fields in this screen.
Table 111 Configuration > Network > Interface > VTI
LABEL
DESCRIPTION
Configuration
Add
Click this to create a new entry.
Edit
Double-click an entry or select it and click
Edit
to open a screen where you can modify the
entry’s settings.
Remove
To remove an entry, select it and click
Remove
. The Zyxel Device confirms you want to
remove it before doing so.
Activate
To turn on an entry, select it and click
Activate
.
Inactivate
To turn off an entry, select it and click
Inactivate
.
References
Select an entry and click
References
to open a screen that shows which settings use the
entry.
#
This field is a sequential value, and it is not associated with any interface.
Status
This icon is lit when the entry is active and dimmed when the entry is inactive.
Name
This field displays the name of the VTI interface.
IP Address
This field displays the current IP address of the virtual interface and subnet mask in bits. If the
IP address is 0.0.0.0, the interface does not have an IP address yet.
vpn-rule
This shows the name of the associated IPSec VPN rule with
VPN Tunnel Interface
application
scenario.
Apply
Click
Apply
to save your changes back to the Zyxel Device.
Reset
Click
Reset
to return the screen to its last-saved settings.