ZyXEL Communications ZyXEL ZyWALL USG-1000, User Manual

Page: 348 / 986

Chapter 21 IPSec VPN
ZyWALL USG 2000 User’s Guide
348
My Address Select how the IP address of the ZyWALL in the IKE SA is defined.
If you select Interface, select the Ethernet interface, VLAN
interface, virtual Ethernet interface, virtual VLAN interface, PPPoE/
PPTP interface, or auxiliary interface. The IP address of the ZyWALL
in the IKE SA is the IP address of the interface.
If you select Domain Name / IP, enter the domain name or the IP
address of the ZyWALL. The IP address of the ZyWALL in the IKE SA
is the specified IP address or the IP address corresponding to the
domain name. 0.0.0.0 is invalid.
Peer Gateway
Address
Select how the IP address of the remote IPSec router in the IKE SA is
defined.
Select Static Address to enter the domain name or the IP address
of the remote IPSec router. You can provide a second IP address or
domain name for the ZyWALL to try if it cannot establish an IKE SA
with the first one.
Select Dynamic Address if the remote IPSec router has a dynamic
IP address (and does not use DDNS).
Authentication Click Advanced to display more settings. Click Basic to display
fewer settings.
Note: The ZyWALL and remote IPSec router must use the same
authentication method to establish the IKE SA.
Pre-Shared
Key
Select this to have the ZyWALL and remote IPSec router use a pre-
shared key (password) to identify each other when they negotiate
the IKE SA. Type the pre-shared key in the field to the right. The
pre-shared key can be
• 8 - 32 alphanumeric characters or ,;|`~!@#$%^&*()_+\{}':./
<>=-".
• 8 - 32 pairs of hexadecimal (0-9, A-F) characters, preceded by
“0x”.
If you want to enter the key in hexadecimal, type “0x” at the
beginning of the key. For example, "0x0123456789ABCDEF" is in
hexadecimal format; in “0123456789ABCDEF” is in ASCII format. If
you use hexadecimal, you must enter twice as many characters
since you need to enter pairs.
The ZyWALL and remote IPSec router must use the same pre-shared
key.
Table 109 VPN > IPSec VPN > VPN Gateway > Edit (continued)
LABEL DESCRIPTION