ZyXEL Communications Prestige 661H Series, User Manual

Page: 402 / 547

Prestige 661H/HW Series User’s Guide
Chapter 42 VPN/IPSec Setup 402
IPSec
Algorithm
This field displays the security protocols used for an SA. ESP provides confidentiality
and integrity of data by encrypting the data and encapsulating it into IP packets.
Encryption methods include 56-bit DES and 168-bit 3DES . NULL denotes a tunnel
without encryption.168-bit 3DES and 128-bit AES . NULL denotes a tunnel without
encryption.
AH (Authentication Header) provides strong integrity and authentication by adding
authentication information to IP packets. This authentication information is calculated
using header and payload data in the IP packet. This provides an additional level of
security. AH choices are MD5 (default - 128 bits) and SHA -1 (160 bits) .
Both AH and ESP increase the Prestige’s processing requirements and
communications latency (delay).
You need to finish configuring the VPN policy in menu 27.1.1.1 or 27.1.1.2 if
??? is
displayed.
Key Mgt This field displays the SA’s type of key management, ( IKE or Manual ).
Remote Addr
Start
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Single , this is a
static IP address on the network behind the remote IPSec router.
When the
Addr Type field in Menu 27.1.1 IPSec Setup is configured to Range , this is
the beginning (static) IP address, in a range of computers on the network behind the
remote IPSec router.
When the
Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET , this
is a static IP address on the network behind the remote IPSec router.
This field displays
N/A when you configure the Secure Gateway Address field in SMT
27.1.1 to 0.0.0.0.
Addr End /
Mask
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Single , this is
the same (static) IP address as in the Remote Addr Start field.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to Range , this is
the end (static) IP address, in a range of computers on the network behind the remote
IPSec router.
When the
Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET , this
is a subnet mask on the network behind the remote IPSec router.
This field displays
N/A when you configure the Secure Gateway Address field in SMT
27.1.1 to 0.0.0.0.
Secure GW
Addr
This is the WAN IP address or the domain name (up to the first 15 characters are
displayed) of the IPSec router with which you are making the VPN connection. This field
displays 0.0.0.0 when you configure the Secure Gateway Address field in SMT 27.1.1
to 0.0.0.0.
Select
Command
Press [SPACE BAR] to choose from None , Edit , Delete , Go To Rule , Next Page or
Previous Page and then press [ENTER]. You must select a rule in the next field when
you choose the Edit , Delete or Go To commands.
Select None and then press [ENTER] to go to the “Press ENTER to Confirm…” prompt.
Use Edit to create or edit a rule. Use Delete to remove a rule. To edit or delete a rule,
first make sure you are on the correct page. When a VPN rule is deleted, subsequent
rules do not move up in the page list.
Use
Go To Rule to view the page where your desired rule is listed.
Select Next Page or Previous Page to view the next or previous page of rules
(respectively).
Select Rule Type the VPN rule index number you wish to edit or delete and then press [ENTER].
When you have completed this menu, press [ENTER] at the prompt “ Press ENTER to Confirm
or ESC to Cancel: ” to save your configuration, or press [ESC] at any time to cancel.
Table 137 Menu 27.1 IPSec Summary (continued)
FIELD DESCRIPTION