ZyXEL Communications SBG5500-A, User Manual

Page: 164 / 274

Chapter 10 VPN
SBG5500 Series User’s Guide
164
The following table describes the labels in this screen.
Table 69 Configuration > VPN > IPsec VPN
LABEL DESCRIPTION
DPD Timeout Use Dead Peer Detection (DPD) so the SBG makes sure the remote IPsec router is there
before it transmits data through the IKE SA. The remote IPsec router must support DPD.
Enter the number of seconds for DPD Timeout . The SBG sends a message to the remote
IPsec router. If the remote IPsec router responds, the SBG keeps the tunnel up.
DPD Attempts If the remote IPsec router does not respond, enter how many attempts the SBG should
make before it shuts down the tunnel.
Note: If you enabled Nailed Up in the VPN > IPsec VPN > VPN Connection
screen, the SBG shuts down the tunnel and will automatically establish a
new tunnel.
Gateway Configuration
Add Click this to configure a new entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify
the entry’s settings.
Remove To remove an existing entry, select it and click Remove .
# This field displays the VPN gateway index number.
Status This field displays whether the IPsec VPN gateway is active or not. A green ON button
signifies that this IPsec VPN gateway is active. A gray OFF button signifies that this IPsec
VPN gateway is not active.
Name This field displays the identification name for this VPN gateway.
My Address This field displays the interface the VPN gateway uses.
Secure Gateway This field displays the peer gateway address of the IPsec router with which you are
making the VPN connection.
IP Version This field displays whether the VPN gateway uses IPv4 or IPv6 addresses.
VPN Connection This field displays which VPN connection use this gateway.
IKE Version This field displays the IKE Version the VPN gateway uses.
Connection Configuration
Add Click this to configure a new entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify
the entry’s settings.
Remove To remove an existing entry, select it and click Remove .
Connect To connect an IPsec SA, select it and click Connect .
Disconnect To disconnect an IPsec SA, select it and click Disconnect .
# This field displays the VPN connection index number.
Status This field displays whether the IPsec VPN connection is active or not. A green ON button
signifies that this IPsec VPN connection is active. A gray OFF button signifies that this IPsec
VPN connection is not active.
Tunnel This shows a lit up globe if the VPN tunnel is connected or and a gray globe when it is
disconnected.
Name This field displays the identification name for this VPN policy.
VPN Gateway This field displays the VPN gateway the VPN connection uses.
Encapsulation This field displays the type of encapsulation the IPsec SA uses,
Algorithm This field displays the encryption algorithm used in the IKE SA.
Policy This field displays the remote and local policy.