ZyWALL 70 User’s Guide
Chapter 3 Wizard Setup
87
3.3.3 IPSec Setting (IKE Phase 2)
Figure 20
VPN Wizard: IPSec Setting
The following table describes the labels in this screen.
Table 16
VPN Wizard: IPSec Setting
LABEL
DESCRIPTION
Encapsulation Mode
Tunnel
is compatible with NAT,
Transport
is not.
Tunnel mode encapsulates the entire IP packet to transmit it securely. A Tunnel
mode is required for gateway services to provide access to internal systems.
Tunnel mode is fundamentally an IP tunnel with authentication and encryption.
Transport mode is used to protect upper layer protocols and only affects the
data in the IP packet. In Transport mode, the IP packet contains the security
protocol (AH or ESP) located after the original IP header and options, but before
any upper layer protocols contained in the packet (such as TCP and UDP).
IPSec Protocol
Select the security protocols used for an SA.
Both
AH
and
ESP
increase ZyWALL processing requirements and
communications latency (delay).
Encryption Algorithm When
DES
is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. The DES
encryption algorithm uses a 56-bit key. Triple DES (
3DES
) is a variation on DES
that uses a 168-bit key. As a result,
3DES
is more secure than
DES
. It also
requires more processing power, resulting in increased latency and decreased
throughput. This implementation of
AES
uses a 128-bit key.
AES
is faster than
3DES
. Select
NULL
to set up a tunnel without encryption. When you select
NULL
, you do not enter an encryption key.
Authentication
Algorithm
MD5
(Message Digest 5) and
SHA1
(Secure Hash Algorithm) are hash
algorithms used to authenticate packet data. The
SHA1
algorithm is generally
considered stronger than
MD5
, but is slower. Select
MD5
for minimal security
and
SHA-1
for maximum security.
Summary of Contents for ZyWALL 70
Page 1: ...ZyWALL 70 Internet Security Appliance User s Guide Version 3 64 3 2005 ...
Page 2: ......
Page 38: ...ZyWALL 70 User s Guide 38 List of Figures ...
Page 46: ...ZyWALL 70 User s Guide 46 List of Tables ...
Page 74: ...ZyWALL 70 User s Guide 74 Chapter 2 Introducing the Web Configurator ...
Page 92: ...ZyWALL 70 User s Guide 92 Chapter 3 Wizard Setup ...
Page 102: ...ZyWALL 70 User s Guide 102 Chapter 4 LAN Screens ...
Page 108: ...ZyWALL 70 User s Guide 108 Chapter 5 Bridge Screens ...
Page 130: ...ZyWALL 70 User s Guide 130 Chapter 6 Wireless LAN ...
Page 136: ...ZyWALL 70 User s Guide 136 Chapter 7 WAN Screens Figure 45 WAN General ...
Page 155: ...ZyWALL 70 User s Guide Chapter 7 WAN Screens 155 Figure 55 Dial Backup Setup ...
Page 234: ...ZyWALL 70 User s Guide 234 Chapter 13 Introduction to IPSec ...
Page 275: ...ZyWALL 70 User s Guide Chapter 15 Certificates 275 Figure 125 My Certificate Details ...
Page 294: ...ZyWALL 70 User s Guide 294 Chapter 16 Authentication Server Figure 136 Local User Database ...
Page 314: ...ZyWALL 70 User s Guide 314 Chapter 17 Network Address Translation NAT ...
Page 318: ...ZyWALL 70 User s Guide 318 Chapter 18 Static Route ...
Page 324: ...ZyWALL 70 User s Guide 324 Chapter 19 Policy Route ...
Page 340: ...ZyWALL 70 User s Guide 340 Chapter 20 Bandwidth Management ...
Page 376: ...ZyWALL 70 User s Guide 376 Chapter 22 Remote Management ...
Page 390: ...ZyWALL 70 User s Guide 390 Chapter 24 Logs Screens Figure 194 Log Settings ...
Page 413: ...ZyWALL 70 User s Guide Chapter 25 Maintenance 413 Figure 216 Restart Screen ...
Page 414: ...ZyWALL 70 User s Guide 414 Chapter 25 Maintenance ...
Page 440: ...ZyWALL 70 User s Guide 440 Chapter 28 WAN and Dial Backup Setup ...
Page 456: ...ZyWALL 70 User s Guide 456 Chapter 31 DMZ Setup ...
Page 460: ...ZyWALL 70 User s Guide 460 Chapter 32 Route Setup ...
Page 470: ...ZyWALL 70 User s Guide 470 Chapter 33 Remote Node Setup ...
Page 522: ...ZyWALL 70 User s Guide 522 Chapter 39 System Information Diagnosis ...
Page 538: ...ZyWALL 70 User s Guide 538 Chapter 40 Firmware and Configuration File Maintenance ...
Page 550: ...ZyWALL 70 User s Guide 550 Chapter 42 Remote Management ...
Page 558: ...ZyWALL 70 User s Guide 558 Chapter 43 IP Policy Routing ...
Page 573: ...ZyWALL 70 User s Guide Chapter 45 Troubleshooting 573 Figure 360 Java Sun ...
Page 574: ...ZyWALL 70 User s Guide 574 Chapter 45 Troubleshooting ...
Page 582: ...ZyWALL 70 User s Guide 582 Appendix B Removing and Installing a Fuse ...
Page 602: ...ZyWALL 70 User s Guide 602 Appendix D IP Subnetting ...
Page 608: ...ZyWALL 70 User s Guide 608 Appendix F PPTP ...
Page 626: ...ZyWALL 70 User s Guide 626 Appendix H Triangle Route ...
Page 656: ...ZyWALL 70 User s Guide 656 Appendix K Importing Certificates ...
Page 658: ...ZyWALL 70 User s Guide 658 Appendix L Command Interpreter ...
Page 664: ...ZyWALL 70 User s Guide 664 Appendix M Firewall Commands ...
Page 668: ...ZyWALL 70 User s Guide 668 Appendix N NetBIOS Filter Commands ...
Page 674: ...ZyWALL 70 User s Guide 674 Appendix P Brute Force Password Guessing Protection ...
Page 696: ...ZyWALL 70 User s Guide 696 Appendix R Log Descriptions ...