ZyXEL Communications ZyWall ATP series - Restrictions for Ipsec Virtual Tunnel Interface; VTI Screen

Chapter 9 Interfaces
ZyWALL ATP Series User’s Guide
283
9.9.1 Restrictions for IPSec Virtual Tunnel Interface
• IPv4 traffic only
• IPSec tunnel mode only. A shared keyword must not be configured when using tunnel mode.
• With a VTI VPN you do not add local or remote LANs to your VPN configuration.
• For a VTI VPN you should only have one local and one remote WAN.
• A dynamic peer is not supported
• The IPSec VTI is limited to IP unicast and multicast traffic only.
9.9.2 VTI Screen
To access this screen, click Configuration > Network > Interface > VTI.
Figure 195 Configuration > Network > Interface > VTI
The following table describes the fields in this screen.
Table 111 Configuration > Network > Interface > VTI
LABEL DESCRIPTION
Configuration
Add Click this to create a new entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify the
entry’s settings.
Remove To remove an entry, select it and click Remove. The Zyxel Device confirms you want to
remove it before doing so.
Activate To turn on an entry, select it and click Activate.
Inactivate To turn off an entry, select it and click Inactivate.
References Select an entry and click References to open a screen that shows which settings use the
entry.
# This field is a sequential value, and it is not associated with any interface.
Status This icon is lit when the entry is active and dimmed when the entry is inactive.
Name This field displays the name of the VTI interface.
IP Address This field displays the current IP address of the virtual interface and subnet mask in bits. If the
IP address is 0.0.0.0, the interface does not have an IP address yet.
vpn-rule This shows the name of the associated IPSec VPN rule with VPN Tunnel Interface application
scenario.
Apply Click Apply to save your changes back to the Zyxel Device.
Reset Click Reset to return the screen to its last-saved settings.