ZyXEL Communications P-661HNU - Page 223

Chapter 16 VPN
P-661HNU-Fx User’s Guide
223
Tunnel Name Type up to 32 characters to identify this VPN policy. You may use any
character, including spaces, but the ZyXEL Device drops trailing spaces.
Mode Select net-net or Roadwarrior from the drop-down list box. Multiple
SAs connecting through a secure gateway must have the same
negotiation mode.
Local Specify the IP addresses of the devices behind the ZyXEL Device that
can use the VPN tunnel. The local IP addresses must correspond to the
remote IPSec router's configured remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both
the same. Two active SAs can have the same local or remote IP
address, but not both. You can configure multiple SAs between the
same local and remote IP addresses, as long as only one is active at
any time.
Local Address
Type
Use the drop-down menu to choose Single, or Subnet. Select Single
for a single IP address. Select Subnet to specify IP addresses based on
the subnet mask.
IP Address Start When the Local Address Type field is configured to Single, enter a
(static) IP address on the LAN behind your ZyXEL Device. When the
Local Address Type field is configured to Subnet, enter an IP
address on the LAN behind your ZyXEL Device.
End / Subnet
Mask
When the Local Address Type field is configured to Single, this field
is N/A. When the Local Address Type field is configured to Subnet,
enter the subnet of the LAN behind your ZyXEL Device.
Remote Specify the IP addresses of the devices behind the remote IPSec router
that can use the VPN tunnel. The remote IP addresses must correspond
to the remote IPSec router's configured local IP addresses.
Two active SAs cannot have the local and remote IP address(es) both
the same. Two active SAs can have the same local or remote IP
address, but not both. You can configure multiple SAs between the
same local and remote IP addresses, as long as only one is active at
any time.
Remote Address
Type
Use the drop-down menu to choose Single, or Subnet. Select Single
for a single IP address. Select Subnet to specify IP addresses based on
the subnet mask.
IP Address Start When the Remote Address Type field is configured to Single, enter a
(static) IP address on the network behind the remote IPSec router.
When the Remote Address Type field is configured to Subnet, enter
an IP Address on the LAN behind the IPSec router.
End / Subnet
Mask
When the Remote Address Type field is configured to Single, this
field is N/A. When the Remote Address Type field is configured to
Subnet, enter the subnet of the LAN behind the IPSec router.
Address
Information
WAN Interface The interface used to connect to the internet
My IP Address My IP Address only shows the IP of the selected interface. There is no
need to modify this information.
Table 58 Security > VPN > Setup > Edit
LABEL DESCRIPTION