ZyXEL Communications LTE5121, Руководство пользователя

Страница: 152 / 234

Chapter 16 VPN
LTE-5121 User’s Guide
152
This screen contains the following fields:
Table 62
IPSec VPN: Add
LABEL DESCRIPTION
IPSEC Setup
Active Select Active to activate this VPN policy.
NAT Traversal Select this if any of these conditions are satisfied.
• This IKE SA might be used to negotiate IPSec SAs that use ESP as the active
protocol.
• There are one or more NAT routers between the LTE Device and remote IPSec
router, and these routers do not support IPSec pass-thru or a similar feature.
The remote IPSec router must also enable NAT traversal, and the NAT routers
have to forward packets with UDP port 500 and UDP 4500 headers unchanged.
Tunnel Name Enter the name of the VPN connection.
Mode Select net-net to connect two networks.
Use RoadWarrior to connect an individual IPSec VPN client.
Local
Local Address
Type
Select Single to have only one local LAN IP address use the VPN tunnel. Select
Subnet to specify local LAN IP addresses by their subnet mask.
IP Address
Start
If Single is selected, enter a (static) IP address on the LAN behind your LTE
Device.
If Subnet is selected, specify IP addresses on a network by their subnet mask
by entering a (static) IP address on the LAN behind your LTE Device. Then enter
the subnet mask to identify the network address.
End/Subnet
Mask
If Subnet is selected, enter the subnet mask to identify the network address.
Remote
Remote
Address Type
Select Single to have only one remote LAN IP address use the VPN tunnel.
Select Subnet to specify remote LAN IP addresses by their subnet mask.
IP Address
Start
If Single is selected, enter a (static) IP address on the LAN behind the remote
IPSec’s router.
If Subnet is selected, specify IP addresses on a network by their subnet mask
by entering a (static) IP address on the LAN behind the remote IPSec’s router.
Then enter the subnet mask to identify the network address.
End/Subnet
Mask
If Subnet is selected, enter the subnet mask to identify the network address.
Address Information
WAN Interface Select the interface for the VPN gateway.
My IP Address Enter the IP address of the LTE Device in the IKE SA.
Secure
Gateway
Address
Enter the IP address of the remote IPSec router in the IKE SA.
Local ID Select IP to identify the LTE Device by its IP address.
Select DNS to identify this LTE Device by a domain name.
Select E-mail to identify this LTE Device by an e-mail address.