ZyXEL Communications 792H User Manual

Page 394

Advertising
background image

Prestige 792H G.SHDSL Router

36-8

VPN/IPSec

Setup

Table 36-2 Menu 27.1.1 IPSec Setup

FIELD DESCRIPTION

EXAMPLE

Secure
Gateway
Address

Type the IP address or the domain name (up to 31 characters) of the
IPSec router with which you’re making the VPN connection.

Set this field to 0.0.0.0 if the remote IPSec router has a dynamic WAN IP
address (the Key Management field must be set to IKE, see later).

Zw50test.com.

tw

Protocol

Enter 1 for ICMP, 6 for TCP, 17 for UDP, etc. 0 is the default and signifies
any protocol.

0

DNS Server

If there is a private DNS server that services the VPN, type its IP address
here. The Prestige assigns this additional DNS server to the Prestige's
DHCP clients that have IP addresses in this IPSec rule's range of local
addresses.

A DNS server allows clients on the VPN to find other computers and
servers on the VPN by their (private) domain names.

Local

Local IP addresses must be static and correspond to the remote IPSec
router's configured remote IP addresses.

Two active SAs can have the same configured local or remote IP
address, but not both. You can configure multiple SAs between the same
local and remote IP addresses, as long as only one is active at any time.

In order to have more than one active rule with the Secure Gateway
Address
field set to 0.0.0.0, the ranges of the local IP addresses cannot
overlap between rules.

If you configure an active rule with 0.0.0.0 in the Secure Gateway
Address
field and the LAN’s full IP address range as the local IP address,
then you cannot configure any other active rules with the Secure Gateway
Address
field set to 0.0.0.0.

Addr Type Press [SPACE BAR] to choose SINGLE, RANGE, or SUBNET and press

[ENTER]. Select SINGLE with a single IP address. Select RANGE for a
specific range of IP addresses. Select SUBNET to specify IP addresses on
a network by their subnet mask.

SINGLE

IP Addr Start When the Addr Type field is configured to Single, enter a static IP

address on the LAN behind your Prestige.

When the Addr Type field is configured to Range, enter the beginning
(static) IP address, in a range of computers on your LAN behind your
Prestige.

When the Addr Type is configured to SUBNET, this is a (static) IP
address on the LAN behind your Prestige.

192.168.1.35

Advertising