ZyXEL Communications P-202 - Manual (Page 34)

P-202H Plus v2 Support Notes
1. What is SSH Sentinel VPN client?
Developed by SSH (http://www.ssh.com) Sentinel VPN client is a bundled
software with P-202H Plus v2 VPN solution. It supports IPSec/VPN.
2. Why do I need to use Sentinel?
SSH Sentinel(TM) is an easy-to-use software for remote working based on the
latest VPN technology. The software provides smooth integration with P-202H
Plus v2 VPN which may be installed in HQ gateway.
3. Does SSH Sentinel work with the PPP over Ethernet (PPPoE) protocol,
which is used by the ADSL Network Adapter cards?
Yes, the latest release SSH Sentinel 1.3, also supports PPPoE, but due to the
wide range of PPPoE implementations and the fact, that we have a very limited
access to PPPoE adapters in general, we are not able to fully test this
functionality.
As a consequence, it is hard to say with exactly which PPPoE drivers SSH
Sentinel 1.3 is fully compatible.
4. How to configure Pre-IPSec filter?
In pre-ipsec configuration, never, remove the pre-IPSec filter rule that bypasses
IKE traffic. If you do, all your attempts to establish any IPSec connection are
bound to fail, because the negotiations never take place. Only when you would
like to have some TCP/UDP packets bypass IPSec, must you specify the traffic
as bypass in pre-ipsec filter. Otherwise, just not setup any bypass/discard/reject
on the traffic you would like to be protected by IPSec.
5. What is "Acquire virtual IP address" for? Should I check this box?
With this feature, Sentinel can obtain a virtual IP address assigned from VPN
gateway. However, if connecting with P-202H Plus v2, please not check this box.
P-202H Plus v2 doesn’t support this feature in current firmware.
6. What is "Extended Authentication"? Should I check this box?
With this feature, VPN connection from Sentinel can be authenticated to
authentication server, such as, RADIUS, TACAS, …etc. behind remote VPN
gateway. However, if connecting with P-202H Plus v2, please not check this box.
P-202H Plus v2 doesn’t support this feature in current firmware. It will support in
the near future.
All contents copyright © 2006 ZyXEL Communications Corporation.
34