Инструкция для ZYXEL ZyWALL 2 EE

(скачивание инструкции бесплатно)

Формат файла: PDF

Доступность: Бесплатно как и все руководства на сайте. Без регистрации и SMS.

Дополнительно: Чтение инструкции онлайн

ZyWALL 2 Series User’s Guide

14-16

VPN Screens

Table 14-7 Basic IKE VPN Rule Edit

LABEL

DESCRIPTION

Ending IP
Address/ Subnet
Mask

When the

Address Type

field is configured to

Single Address

, this field is N/A. When the

Address Type

field is configured to

Range Address

, enter the end (static) IP address, in

a range of computers on the network behind the remote IPSec router. When the

Address

Type

field is configured to

Subnet Address

, enter a subnet mask on the network behind

the remote IPSec router.

DNS Server (for
IPSec VPN)

If there is a private DNS server that services the VPN, type its IP address here. The
ZyWALL assigns this additional DNS server to the ZyWALL's DHCP clients that have IP
addresses in this IPSec rule's range of local addresses.

A DNS server allows clients on the VPN to find other computers and servers on the VPN
by their (private) domain names.

Authentication Key

Pre-Shared Key

Select the

Pre-Shared Key

radio button and type your pre-shared key in this field. A pre-

shared key identifies a communicating party during a phase 1 IKE negotiation. It is called
"pre-shared" because you have to share it with another party before you can communicate
with them over a secure connection.

Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal ("0-9",
"A-F") characters. You must precede a hexadecimal key with a "0x” (zero x), which is not
counted as part of the 16 to 62 character range for the key. For example, in
"0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and
“0123456789ABCDEF” is the key itself.

Both ends of the VPN tunnel must use the same pre-shared key. You will receive a
“PYLD_MALFORMED” (payload malformed) packet if the same pre-shared key is not
used on both ends.

Certificate

Select the

Certificate

radio button to identify the ZyWALL by a certificate. This feature is

not available on the ZyWALL 2WE.

Use the drop-down list box to select the certificate to use for this VPN tunnel. You must
have certificates already configured in the

My Certificates

screen. Click

My Certificates

to go to the

My Certificates

screen where you can view the ZyWALL's list of certificates.