ZyXEL Communications ZyWall USG20-VPN, User Manual

Page: 356 / 683

Chapter 21 IPSec VPN
USG20(W)-VPN Series User’s Guide
356
Figure 231
Configuration > VPN > IPSec VPN > Concentrator > Add/Edit
Each field is described in the following table.
21.5 USG IPSec VPN Client Configuration Provisioning
Use the Configuration > VPN > IPSec VPN > Configuration Provisioning screen to configure
who can retrieve VPN rule settings from the USG using the USG IPSec VPN Client. In the USG IPSec
VPN Client, you just need to enter the IP address of the
USG
to get all the VPN rule settings
automatically. You do not need to manually configure all rule settings in the USG IPSec VPN client.
VPN rules for the USG IPSec VPN Client have certain restrictions. They must not contain the
following settings:
• AH active protocol
• NULL encryption
• SHA512 authentication
• A subnet or range remote policy
Table 139
VPN > IPSec VPN > Concentrator > Add/Edit
LABEL DESCRIPTION
Name Enter the name of the concentrator. You may use 1-31 alphanumeric characters, underscores(
_
),
or dashes (-), but the first character cannot be a number. This value is case-sensitive.
Member Select the concentrator’s IPSec VPN connection policies.
Note: You must disable policy enforcement in each member. See Section 21.2.1 on page 339 .
IPSec VPN connection policies that do not belong to a VPN concentrator appear under Available .
Select any VPN connection policies that you want to add to the VPN concentrator and click the
right arrow button to add them.
The VPN concentrator’s member VPN connections appear under Member . Select any VPN
connections that you want to remove from the VPN concentrator, and click the left arrow button
to remove them.
OK Click OK to save your changes in the USG.
Cancel Click Cancel to exit this screen without saving.