ZyXEL Communications P-791R v3 - Configuring Advanced IKE Settings

Chapter 13 VPN
P-79X Series User’s Guide
136
13.4 Configuring Advanced IKE Settings
Click Advanced Setup in the VPN Setup-Edit screen to open this screen.
Figure 79 Security > VPN > Setup > Edit > Advanced Setup
The following table describes the fields in this screen.
Table 49 Security > VPN > Setup > Edit > Advanced Setup
LABEL DESCRIPTION
VPN - IKE - Advanced Setup
Protocol Enter 1 for ICMP, 6 for TCP, 17 for UDP, and so on. 0 is the default and signifies
any protocol.
Enable Replay
Detection
As a VPN setup is processing intensive, the system is vulnerable to Denial of
Service (DoS) attacks The IPSec receiver can detect and reject old or duplicate
packets to protect against replay attacks. Select YES from the drop-down menu
to enable replay detection, or select NO to disable it.
Local Start Port 0 is the default and signifies any port. Type a port number from 0 to 65535.
Some of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80,
HTTP; 25, SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port number must
be greater than that specified in the previous field. If Local Start Port is left at
0, End will also remain at 0.
Remote Start Port 0 is the default and signifies any port. Type a port number from 0 to 65535.
Some of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80,
HTTP; 25, SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port number must
be greater than that specified in the previous field. If Remote Start Port is left
at 0, End will also remain at 0.
Phase 1
Negotiation Mode Select Main or Aggressive from the drop-down list box. Multiple SAs
connecting through a secure gateway must have the same negotiation mode.