ZyXEL Communications Prestige 652 Series, User Manual

Page: 205 / 523

Prestige 652 Series User’s Guide
VPN Screens 17-21
Table 17-9 VPN Manual Setup
LABEL DESCRIPTION
Remote Address
Type
Use the drop-down menu to choose Single , Range , or Subnet . Select Single with a
single IP address. Select Range for a specific range of IP addresses. Select Subnet to
specify IP addresses on a network by their subnet mask.
IP Address Start
When the Remote Address Type field is configured to Single, enter a (static) IP
address on the network behind the remote IPSec router. When the Remote Address
Type field is configured to Range , enter the beginning (static) IP address, in a range of
computers on the network behind the remote IPSec router. When the Remote
Address Type field is configured to Subnet , enter a (static) IP address on the network
behind the remote IPSec router.
End / Subnet Mask
When the Remote Address Type field is configured to Single , enter the IP address in
the IP Address Start field again here. When the Remote Address Type field is
configured to Range , enter the end (static) IP address, in a range of computers on the
network behind the remote IPSec router. When the Remote Address Type field is
configured to Subnet , enter a subnet mask on the network behind the remote IPSec
router.
My IP Address
Enter the WAN IP address of your Prestige. The Prestige uses its current WAN IP
address (static or dynamic) in setting up the VPN tunnel if you leave this field as
0.0.0.0 . The VPN tunnel has to be rebuilt if this IP address changes.
Secure Gateway IP
Address
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with
which you're making the VPN connection. Set this field to
0.0.0.0 if the remote IPSec
router has a dynamic WAN IP address (the IPSec Key Mode field must be set to IKE ).
SPI
Type a unique SPI from one to four characters long. Valid Characters are "0, 1, 2, 3, 4,
5, 6, 7, 8, and 9".
Encapsulation Mode Select Tunnel mode or Transport mode from the drop-down list box.
IPSec Protocol
Select ESP if you want to use ESP (Encapsulation Security Payload). The ESP
protocol (RFC 2406) provides encryption as well as some of the services offered by
AH . If you select ESP here, you must select options from the Authentication
Algorithm field (described later).