ZyXEL Communications P-2612HW-F1 -, User Manual

Page: 268 / 547

Chapter 14 VPN
P-2612HW Series User’s Guide
268
14.4 Configuring Advanced IKE Settings
Click Advanced Setup in the VPN Setup-Edit screen to open this screen.
Figure 162 Security > VPN > Setup > Edit > Advanced Setup
The following table describes the fields in this screen.
Table 83 Security > VPN > Setup > Edit > Advanced Setup
LABEL DESCRIPTION
VPN - IKE -
Advanced Setup
Protocol
Enter 1 for ICMP, 6 for TCP, 17 for UDP, and so on. 0 is the default and
signifies any protocol.
Enable Replay
Detection As a VPN setup is processing intensive, the system is vulnerable to
Denial of Service (DoS) attacks The IPSec receiver can detect and
reject old or duplicate packets to protect against replay attacks. Select
YES from the drop-down menu to enable replay detection, or select
NO to disable it.
Local Start Port 0 is the default and signifies any port. Type a port number from 0 to
65535. Some of the most common IP ports are: 21, FTP; 53, DNS; 23,
Telnet; 80, HTTP; 25, SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port
number must be greater than that specified in the previous field. If
Local Start Port is left at 0, End will also remain at 0.