ZyXEL Communications ZyXEL ZyWALL P1, User Manual

Page: 68 / 369

ZyWALL P1 User’s Guide
Chapter 3 Wizard Setup 67
3.4.4 IPSec Setting (IKE Phase 2)
Figure 20 VPN Wizard: IPSec Setting
The following table describes the labels in this screen.
Pre-Shared Key Type your pre-shared key in this field. A pre-shared key identifies a
communicating party during a phase 1 IKE negotiation. It is called "pre-shared"
because you have to share it with another party before you can communicate
with them over a secure connection.
Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal
("0-9", "A-F") characters. You must precede a hexadecimal key with a "0x (zero
x), which is not counted as part of the 16 to 62 character range for the key. For
example, in "0x0123456789ABCDEF", 0x denotes that the key is hexadecimal
and 0123456789ABCDEF is the key itself.
Both ends of the VPN tunnel must use the same pre-shared key. You will
receive a PYLD_MALFORMED (payload malformed) packet if the same pre-
shared key is not used on both ends.
Back Click Back to return to the previous screen.
Next Click Next to continue.
Table 15 VPN Wizard: IKE Tunnel Setting (continued)
LABEL DESCRIPTION
Table 16 VPN Wizard: IPSec Setting
LABEL DESCRIPTION
Encapsulation Mode Select Tunnel mode or Transport mode.
IPSec Protocol Select the security protocols used for an SA.
Both
AH and ESP increase ZyWALL processing requirements and
communications latency (delay).