![background image](http://html1.mh-extra.com/html/zyxel-communications/centralized-network-management-vantage-cnm/centralized-network-management-vantage-cnm_user-manual_944723132.webp)
Chapter 6 Device Security Settings
Vantage CNM User’s Guide
132
Ending IP Address/
Subnet Mask
When the
Address Type
field is configured to
Single Address
, this field is N/A.
When the
Address Type
field is configured to
Range Address
, enter the end
(static) IP address, in a range of computers on the LAN behind your device.
When the
Address Type
field is configured to
Subnet Address
, this is a
subnet mask on the LAN behind your device.
Local Port
0 is the default and signifies any port. Type a port number from 0 to 65535 in the
Start
and
End
fields. Some of the most common IP ports are: 21, FTP; 53,
DNS; 23, Telnet; 80, HTTP; 25, SMTP; 110, POP3.
Remote Network
Remote IP addresses must be static and correspond to the remote IPSec
router's configured local IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the
same. Two active SAs can have the same local or remote IP address, but not
both. You can configure multiple SAs between the same local and remote IP
addresses, as long as only one is active at any time.
Address Type
Use the drop-down list box to choose
Single Address
,
Range Address
, or
Subnet Address
. Select
Single Address
with a single IP address. Select
Range Address
for a specific range of IP addresses. Select
Subnet Address
to specify IP addresses on a network by their subnet mask.
Starting IP Address
When the
Address Type
field is configured to
Single Address
, enter a (static)
IP address on the network behind the remote IPSec router. When the Addr Type
field is configured to
Range Address
, enter the beginning (static) IP address, in
a range of computers on the network behind the remote IPSec router. When the
Address Type
field is configured to
Subnet Address
, enter a (static) IP
address on the network behind the remote IPSec router.
Ending IP Address/
Subnet Mask
When the
Address Type
field is configured to
Single Address
, this field is N/A.
When the
Address Type
field is configured to
Range Address
, enter the end
(static) IP address, in a range of computers on the network behind the remote
IPSec router. When the
Address Type
field is configured to
Subnet Address
,
enter a subnet mask on the network behind the remote IPSec router.
Remote Port
0 is the default and signifies any port. Type a port number from 0 to 65535 in the
Start
and
End
fields. Some of the most common IP ports are: 21, FTP; 53,
DNS; 23, Telnet; 80, HTTP; 25, SMTP; 110, POP3.
IPSec Proposal
Encapsulation Mode
Select
Tunnel
mode or
Transport
mode.
Active Protocol
Select the security protocols used for an SA.
Both
AH
and
ESP
increase the device’s processing requirements and
communications latency (delay).
Encryption Algorithm When
DES
is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. The DES
encryption algorithm uses a 56-bit key. Triple DES (
3DES
) is a variation on DES
that uses a 168-bit key. As a result,
3DES
is more secure than
DES
. It also
requires more processing power, resulting in increased latency and decreased
throughput. This implementation of
AES
uses a 128-bit key.
AES
is faster than
3DES
. Select
NULL
to set up a tunnel without encryption. When you select
NULL
, you do not enter an encryption key.
Authentication
Algorithm
MD5
(Message Digest 5) and
SHA1
(Secure Hash Algorithm) are hash
algorithms used to authenticate packet data. The
SHA1
algorithm is generally
considered stronger than
MD5
, but is slower. Select
MD5
for minimal security
and
SHA-1
for maximum security.
Table 49
Device Operation > Device Configuration > VPN > IKE IPSec (continued)
LABEL
DESCRIPTION
Summary of Contents for Centralized Network Management Vantage CNM
Page 2: ......
Page 24: ...Vantage CNM User s Guide 24...
Page 30: ...Vantage CNM User s Guide 30...
Page 33: ...33 PART I Introduction Introducing Vantage CNM 31 GUI Introduction 35...
Page 34: ...34...
Page 52: ...52...
Page 58: ...Chapter 4 Device General Settings Vantage CNM User s Guide 58...
Page 108: ...Chapter 5 Device Network Settings Vantage CNM User s Guide 108...
Page 184: ...Chapter 6 Device Security Settings Vantage CNM User s Guide 184...
Page 207: ...Chapter 7 Device Advanced Settings Vantage CNM User s Guide 207...
Page 208: ...Chapter 7 Device Advanced Settings Vantage CNM User s Guide 208...
Page 210: ...Chapter 8 Device Log Vantage CNM User s Guide 210...
Page 234: ...Chapter 9 Device Configuration Management Vantage CNM User s Guide 234...
Page 248: ...248...
Page 264: ...Chapter 14 VPN Monitor Vantage CNM User s Guide 264...
Page 265: ...265 PART IV Monitor Device Status Monitor 267 Device HA Status Monitor 269 Device Alarm 271...
Page 266: ...266...
Page 276: ...Chapter 17 Device Alarm Vantage CNM User s Guide 276...
Page 277: ...277 PART V Log Report Device Operation Report 279 CNM Logs 291 VRPT 293...
Page 278: ...278...
Page 296: ...Chapter 20 VRPT Vantage CNM User s Guide 296...
Page 298: ...298...
Page 312: ...Chapter 21 CNM System Setting Vantage CNM User s Guide 312...
Page 318: ...Chapter 24 Vantage CNM Software Upgrade Vantage CNM User s Guide 318...
Page 322: ...Chapter 26 About Vantage CNM Vantage CNM User s Guide 322...
Page 323: ...323 PART VII Account Management Group 325 Account 329...
Page 324: ...324...
Page 328: ...Chapter 27 Group Vantage CNM User s Guide 328...
Page 332: ...Chapter 28 Account Vantage CNM User s Guide 332...
Page 333: ...333 PART VIII Troubleshooting Troubleshooting 335...
Page 334: ...334...
Page 338: ...Chapter 29 Troubleshooting Vantage CNM User s Guide 338...
Page 340: ...340...
Page 378: ...Appendix E IP Address Assignment Conflicts Vantage CNM User s Guide 378...
Page 382: ...Appendix F Common Services Vantage CNM User s Guide 382...
Page 416: ...Appendix H Open Software Announcements Vantage CNM User s Guide 416...
Page 424: ...Appendix J Customer Support Vantage CNM User s Guide 424...
Page 428: ...Index Vantage CNM User s Guide 428...
Page 429: ...Index Vantage CNM User s Guide 429...
Page 430: ...Index Vantage CNM User s Guide 430...