ZyXEL Communications ZyWALL 110 Series, Руководство пользователя, Страница: 286 / 562

Chapter 20 IPSec VPN
ZyWALL 110/310/1100 Series User’s Guide
286
Each field is discussed in the following table. See Section 20.2.2 on page 292 and Section 20.2.1 on
page 286 for more information.
20.2.1 The VPN Connection Add/Edit (IKE) Screen
The VPN Connection Add/Edit Gateway screen allows you to create a new VPN connection
policy or edit an existing one. To access this screen, go to the Configuration > VPN Connection
screen (see
Section 20.2 on page 285 ), and click either the Add icon or an Edit icon.
Table 106
Configuration > VPN > IPSec VPN > VPN Connection
LABEL DESCRIPTION
Use Policy
Route to control
dynamic IPSec
rules Select this to be able to use policy routes to manually specify the destination addresses of
dynamic IPSec rules. You must manually create these policy routes. The ZyWALL
automatically obtains source and destination addresses for dynamic IPSec rules that do not
match any of the policy routes.
Clear this to have the ZyWALL automatically obtain source and destination addresses for all
dynamic IPSec rules.
Ignore "Don't
Fragment"
setting in
packet header Select this to fragment packets larger than the MTU (Maximum Transmission Unit) that have
the “don’t” fragment” bit in the IP header turned on. When you clear this the ZyWALL drops
packets larger than the MTU that have the “don’t” fragment” bit in the header turned on.
Add Click this to create a new entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify the
entry’s settings.
Remove To remove an entry, select it and click Remove. The ZyWALL confirms you want to remove
it before doing so.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
Connect To connect an IPSec SA, select it and click Connect.
Disconnect To disconnect an IPSec SA, select it and click Disconnect.
Object
Reference Select an entry and click Object Reference to open a screen that shows which settings use
the entry. See
Section 7.3.2 on page 122 for an example.
# This field is a sequential value, and it is not associated with a specific connection.
Status The activate (light bulb) icon is lit when the entry is active and dimmed when the entry is
inactive.
The connect icon is lit when the interface is connected and dimmed when it is disconnected.
Name This field displays the name of the IPSec SA.
VPN Gateway This field displays the associated VPN gateway(s). If there is no VPN gateway, this field
displays “manual key”.
Encapsulation This field displays what encapsulation the IPSec SA uses.
Algorithm This field displays what encryption and authentication methods, respectively, the IPSec SA
uses.
Policy This field displays the local policy and the remote policy, respectively.
Apply Click Apply to save your changes back to the ZyWALL.
Reset Click Reset to return the screen to its last-saved settings.