ZyXEL Communications P-2608HWL-Dx Series - Manual (Page 18)

P-2608HWL-Dx Series User’s Guide
18 Table of Contents
18.1.2 Additional Topics for IKE SA .................................................................226
18.1.2.1 Negotiation Mode ........................................................................226
18.1.2.2 VPN, NAT and NAT Traversal .....................................................226
18.1.3 IPSec SA Overview ..............................................................................227
18.1.3.1 Local Network and Remote Network ...........................................228
18.1.3.2 Active Protocol ............................................................................228
18.1.3.3 Encapsulation ..............................................................................228
18.1.3.4 IPSec SA Proposal and Perfect Forward Secrecy ......................229
18.1.4 Additional Topics for IPSec SA .............................................................229
18.1.4.1 IPSec SA using Manual Keys .....................................................229
18.2 VPN Setup Screen .........................................................................................230
18.3 Editing VPN Policies ......................................................................................232
18.4 Configuring Advanced IKE Settings ...............................................................237
18.5 Configuring Manual Key .................................................................................240
18.6 Viewing SA Monitor ........................................................................................243
18.7 Configuring Global Setting .............................................................................245
18.8 Telecommuter VPN/IPSec Examples .............................................................245
18.8.1 Telecommuters Sharing One VPN Rule Example ................................245
18.8.2 Telecommuters Using Unique VPN Rules Example .............................246
18.9 VPN and Remote Management .....................................................................248
Chapter 19
Certificates............................................................................................................ 249
19.1 Certificates Overview .....................................................................................249
19.1.1 Advantages of Certificates ....................................................................250
19.2 Self-signed Certificates ..................................................................................250
19.3 Configuration Summary .................................................................................250
19.4 My Certificates ..............................................................................................251
19.5 My Certificate Import .....................................................................................253
19.5.1 Certificate File Formats .........................................................................253
19.6 My Certificate Create ....................................................................................254
19.7 My Certificate Details ....................................................................................256
19.8 Trusted CAs .................................................................................................259
19.9 Trusted CA Import ........................................................................................261
19.10 Trusted CA Details .......................................................................................262
19.11 Trusted Remote Hosts ................................................................................264
19.12 Verifying a Trusted Remote Host’s Certificate ..............................................266
19.12.1 Trusted Remote Host Certificate Fingerprints .....................................266
19.13 Trusted Remote Hosts Import ....................................................................267
19.14 Trusted Remote Host Certificate Details ....................................................267
19.15 Directory Servers .........................................................................................270
19.16 Directory Server Add or Edit ......................................................................271