ZyXEL Communications ZyWALL 1050, Руководство пользователя

Страница: 463 / 1101

Chapter 25 IPSec VPN
ZyWALL USG 1000 User’s Guide
463
Content This field is read-only if the ZyWALL and remote IPSec router use
certificates to identify each other. Type the identity of the ZyWALL
during authentication. The identity depends on the
Local ID Type .
IP - type an IP address; if you type 0.0.0.0, the ZyWALL uses the IP
address specified in the My Address field. This is not recommended
in the following situations:
• There is a NAT router between the ZyWALL and remote IPSec
router.
• You want the remote IPSec router to be able to distinguish
between IPSec SA requests that come from IPSec routers with
dynamic WAN IP addresses.
In these situations, use a different IP address, or use a different
Local ID Type .
DNS - type the domain name; you can use up to 31 ASCII
characters including spaces, although trailing spaces are truncated.
This value is only used for identification and can be any string.
E-mail - the ZyWALL is identified by an e-mail address; you can use
up to 31 ASCII characters including spaces, although trailing spaces
are truncated. This value is only used for identification and can be
any string.
Peer ID Type Select which type of identification is used to identify the remote
IPSec router during authentication. Choices are:
IP - the remote IPSec router is identified by an IP address
DNS - the remote IPSec router is identified by a domain name
E-mail - the remote IPSec router is identified by an e-mail address
Any - the ZyWALL does not check the identity of the remote IPSec
router
If the ZyWALL and remote IPSec router use certificates, there is one
more choice.
Subject Name - the remote IPSec router is identified by the subject
name in the certificate
Table 123 Configuration > VPN > IPSec VPN > VPN Gateway > Edit (continued)
LABEL DESCRIPTION