ZyXEL Communications P-334W User Manual
Page 431
 
Prestige 334W User’s Guide
VPN/IPSec Setup
38-7
Table 38-2 Menu 27.1.1 IPSec Setup
FIELD DESCRIPTION
EXAMPLE
Nat Traversal Select this check box to enable NAT traversal. NAT traversal allows you to
set up a VPN connection when there are NAT routers between the two 
IPSec routers. 
The remote IPSec router must also have NAT traversal enabled. You can 
use NAT traversal with ESP protocol using Transport or Tunnel mode, 
but not with AH protocol nor with Manual key management. 
In order for an IPSec router behind a NAT router to receive an initiating 
IPSec packet, set the NAT router to forward UDP port 500 to the IPSec 
router behind the NAT router. 
Local ID type
Press [SPACE BAR] to choose IP, DNS, or E-mail and press [ENTER].
Select IP to identify this Prestige by its IP address.
Select DNS to identify this Prestige by a domain name.
Select E-mail to identify this Prestige by an e-mail address.
Content
When you select IP in the Local ID Type field, type the IP address of your 
computer or leave the field blank to have the Prestige automatically use its 
own IP address. 
When you select DNS in the Local ID Type field, type a domain name (up 
to 31 characters) by which to identify this Prestige. 
When you select E-mail in the Local ID Type field, type an e-mail address 
(up to 31 characters) by which to identify this Prestige. 
The domain name or e-mail address that you use in the Content field is 
used for identification purposes only and does not need to be a real 
domain name or e-mail address. 
My IP Addr
Enter the IP address of your Prestige. The Prestige uses its current WAN 
IP address (static or dynamic) in setting up the VPN tunnel if you leave this 
field as 0.0.0.0. 
The VPN tunnel has to be rebuilt if this IP address changes.
0.0.0.0
Peer ID type
Press [SPACE BAR] to choose IP, DNS, or E-mail and press [ENTER].
Select IP to identify the remote IPSec router by its IP address.
Select DNS to identify the remote IPSec router by a domain name.
Select E-mail to identify the remote IPSec router by an e-mail address.