ZyXEL Communications EMG5324-D10A Benutzerhandbuch

Seite von 382
Chapter 17 VPN
EMG5324-D10A User’s Guide
206
Local
Specify the IP addresses of the devices behind the Device that can use the VPN tunnel. 
The local IP addresses must correspond to the remote IPSec router's configured 
remote IP addresses. 
Two active SAs cannot have the local and remote IP address(es) both the same. Two 
active SAs can have the same local or remote IP address, but not both. You can 
configure multiple SAs between the same local and remote IP addresses, as long as 
only one is active at any time.
Local Address Type
Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP 
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start 
When the Local Address Type field is configured to Single, enter a (static) IP 
address on the LAN behind your Device. When the Local Address Type field is 
configured to Subnet, enter an IP address on the LAN behind your Device.
End / Subnet Mask
When the Local Address Type field is configured to Single, this field is N/A. When 
the Local Address Type field is configured to Subnet, enter the subnet of the LAN 
behind your Device.
Remote
Specify the IP addresses of the devices behind the remote IPSec router that can use 
the VPN tunnel. The remote IP addresses must correspond to the remote IPSec 
router's configured local IP addresses. 
Two active SAs cannot have the local and remote IP address(es) both the same. Two 
active SAs can have the same local or remote IP address, but not both. You can 
configure multiple SAs between the same local and remote IP addresses, as long as 
only one is active at any time.
Remote Address 
Type
Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP 
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start 
When the Remote Address Type field is configured to Single, enter a (static) IP 
address on the network behind the remote IPSec router. When the Remote Address 
Type
 field is configured to Subnet, enter an IP Address on the LAN behind the IPSec 
router.
End / Subnet Mask
When the Remote Address Type field is configured to Single, this field is N/A. When 
the Remote Address Type field is configured to Subnet, enter the subnet of the LAN 
behind the IPSec router.
Address Information
WAN Interface
The interface used to connect to the internet
My IP Address
My IP Address only shows the IP of the selected interface. There is no need to modify 
this information.
Secure Gateway 
Address
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with 
which you're making the VPN connection. 
If you are not sure of this information you can leave it blank, but do not use 0.0.0.0. 
Local ID
Select IP to identify this Device by its IP address. 
Select DNS to identify this Device by a domain name.
Select E-mail to identify this Device by an e-mail address.
Table 68   
Security > VPN > Setup > Edit (continued)
LABEL
DESCRIPTION