ZyWALL 70 User’s Guide
Chapter 14 VPN Screens
253
The following table describes the labels in this screen.
Table 75
VPN Rules (IKE): Network Policy Edit
LABEL
DESCRIPTION
Active
If the
Active
check box is selected, packets for the tunnel trigger the ZyWALL to
build the tunnel.
Clear the
Active
check box to turn the network policy off. The ZyWALL does not
apply the policy. Packets for the tunnel do not trigger the tunnel.
If you clear the
Active
check box while the tunnel is up (and click
Apply
), you
turn off the network policy and the tunnel goes down.
Name
Type a name to identify this VPN network policy. You may use any character,
including spaces, but the ZyWALL drops trailing spaces.
Protocol
Enter 1 for ICMP, 6 for TCP, 17 for UDP, etc. 0 is the default and signifies any
protocol.
Nailed-Up
Select this check box to turn on the nailed up feature for this SA.
Turn on nailed up to have the ZyWALL automatically reinitiate the SA after the
SA lifetime times out, even if there is no traffic. The ZyWALL also reinitiates the
SA when it restarts.
The ZyWALL also rebuilds the tunnel if it was disconnected due to the output or
input idle timer.
Allow NetBIOS
Traffic Through
IPSec Tunnel
NetBIOS (Network Basic Input/Output System) are TCP or UDP packets that
enable a computer to connect to and communicate with a LAN. It may
sometimes be necessary to allow NetBIOS packets to pass through VPN
tunnels in order to allow local computers to find computers on the remote
network and vice versa.
Select this check box to send NetBIOS packets through the VPN connection.
Check IPSec Tunnel
Connectivity
Select the check box and configure an IP address in the
Ping this Address
field
to have the ZyWALL periodically test the VPN tunnel to the remote IPSec router.
The ZyWALL pings the IP address every minute. The ZyWALL starts the IPSec
connection idle timeout timer when it sends the ping packet. If there is no traffic
from the remote IPSec router by the time the timeout period expires, the
ZyWALL disconnects the VPN tunnel.
Log
Select this check box to set the ZyWALL to create logs when it cannot ping the
remote device.
Ping this Address
If you select
Check IPSec Tunnel Connectivity
, enter the IP address of a
computer at the remote IPSec network. The computer's IP address must be in
this IP policy's remote range (see the
Remote Network
fields).
Gateway Policy
Information
Gateway Policy
Select the gateway policy with which you want to use the VPN policy.
Local Network
Local IP addresses must be static and correspond to the remote IPSec router's
configured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same.
Two active SAs can have the same local or remote IP address, but not both.
You can configure multiple SAs between the same local and remote IP
addresses, as long as only one is active at any time.
Address Type
Use the drop-down list box to choose
Single Address
,
Range Address
, or
Subnet Address
. Select
Single Address
for a single IP address. Select
Range
Address
for a specific range of IP addresses. Select
Subnet Address
to
specify IP addresses on a network by their subnet mask.
Summary of Contents for ZyWALL 70
Page 1: ...ZyWALL 70 Internet Security Appliance User s Guide Version 3 64 3 2005 ...
Page 2: ......
Page 38: ...ZyWALL 70 User s Guide 38 List of Figures ...
Page 46: ...ZyWALL 70 User s Guide 46 List of Tables ...
Page 74: ...ZyWALL 70 User s Guide 74 Chapter 2 Introducing the Web Configurator ...
Page 92: ...ZyWALL 70 User s Guide 92 Chapter 3 Wizard Setup ...
Page 102: ...ZyWALL 70 User s Guide 102 Chapter 4 LAN Screens ...
Page 108: ...ZyWALL 70 User s Guide 108 Chapter 5 Bridge Screens ...
Page 130: ...ZyWALL 70 User s Guide 130 Chapter 6 Wireless LAN ...
Page 136: ...ZyWALL 70 User s Guide 136 Chapter 7 WAN Screens Figure 45 WAN General ...
Page 155: ...ZyWALL 70 User s Guide Chapter 7 WAN Screens 155 Figure 55 Dial Backup Setup ...
Page 234: ...ZyWALL 70 User s Guide 234 Chapter 13 Introduction to IPSec ...
Page 275: ...ZyWALL 70 User s Guide Chapter 15 Certificates 275 Figure 125 My Certificate Details ...
Page 294: ...ZyWALL 70 User s Guide 294 Chapter 16 Authentication Server Figure 136 Local User Database ...
Page 314: ...ZyWALL 70 User s Guide 314 Chapter 17 Network Address Translation NAT ...
Page 318: ...ZyWALL 70 User s Guide 318 Chapter 18 Static Route ...
Page 324: ...ZyWALL 70 User s Guide 324 Chapter 19 Policy Route ...
Page 340: ...ZyWALL 70 User s Guide 340 Chapter 20 Bandwidth Management ...
Page 376: ...ZyWALL 70 User s Guide 376 Chapter 22 Remote Management ...
Page 390: ...ZyWALL 70 User s Guide 390 Chapter 24 Logs Screens Figure 194 Log Settings ...
Page 413: ...ZyWALL 70 User s Guide Chapter 25 Maintenance 413 Figure 216 Restart Screen ...
Page 414: ...ZyWALL 70 User s Guide 414 Chapter 25 Maintenance ...
Page 440: ...ZyWALL 70 User s Guide 440 Chapter 28 WAN and Dial Backup Setup ...
Page 456: ...ZyWALL 70 User s Guide 456 Chapter 31 DMZ Setup ...
Page 460: ...ZyWALL 70 User s Guide 460 Chapter 32 Route Setup ...
Page 470: ...ZyWALL 70 User s Guide 470 Chapter 33 Remote Node Setup ...
Page 522: ...ZyWALL 70 User s Guide 522 Chapter 39 System Information Diagnosis ...
Page 538: ...ZyWALL 70 User s Guide 538 Chapter 40 Firmware and Configuration File Maintenance ...
Page 550: ...ZyWALL 70 User s Guide 550 Chapter 42 Remote Management ...
Page 558: ...ZyWALL 70 User s Guide 558 Chapter 43 IP Policy Routing ...
Page 573: ...ZyWALL 70 User s Guide Chapter 45 Troubleshooting 573 Figure 360 Java Sun ...
Page 574: ...ZyWALL 70 User s Guide 574 Chapter 45 Troubleshooting ...
Page 582: ...ZyWALL 70 User s Guide 582 Appendix B Removing and Installing a Fuse ...
Page 602: ...ZyWALL 70 User s Guide 602 Appendix D IP Subnetting ...
Page 608: ...ZyWALL 70 User s Guide 608 Appendix F PPTP ...
Page 626: ...ZyWALL 70 User s Guide 626 Appendix H Triangle Route ...
Page 656: ...ZyWALL 70 User s Guide 656 Appendix K Importing Certificates ...
Page 658: ...ZyWALL 70 User s Guide 658 Appendix L Command Interpreter ...
Page 664: ...ZyWALL 70 User s Guide 664 Appendix M Firewall Commands ...
Page 668: ...ZyWALL 70 User s Guide 668 Appendix N NetBIOS Filter Commands ...
Page 674: ...ZyWALL 70 User s Guide 674 Appendix P Brute Force Password Guessing Protection ...
Page 696: ...ZyWALL 70 User s Guide 696 Appendix R Log Descriptions ...