Chapter 13 IPSec
P-660HN-51 User’s Guide
148
Figure 75 VPN: IKE SA and IPSec SA
In this example, a computer in network A is exchanging data with a computer in network B. Inside
networks A and B, the data is transmitted the same way data is normally transmitted in the networks.
Between routers X and Y, the data is protected by tunneling, encryption, authentication, and other
security features of the IPSec SA. The IPSec SA is established securely using the IKE SA that routers X and
Y established first.
Remote IPSec Gateway Address
Remote IPSec Gateway Address is the WAN IP address or domain name of the remote IPSec router
(secure gateway).
If the remote secure gateway has a static WAN IP address, enter it in the Remote IPSec Gateway
Address field. You may alternatively enter the remote secure gateway’s domain name (if it has one) in
the Remote IPSec Gateway Address field.
You can also enter a remote secure gateway’s domain name in the Remote IPSec Gateway Address
field if the remote secure gateway has a dynamic WAN IP address and is using DDNS. The Zyxel Device
has to rebuild the VPN tunnel each time the remote secure gateway’s WAN IP address changes (there
may be a delay until the DDNS servers are updated with the remote gateway’s new WAN IP address).
Finding Out More
See Section 13.4 on page 157 for advanced technical information on IPSec VPN.
13.2 The IPSec Settings Screen
The following figure helps explain the main fields in the web configurator.
To Next Page
Loading...
