ZyXEL Communications P-661HW Series User Manual

P-661H/HW Series User’s Guide

Chapter 13 VPN Screens

205

Secure Gateway Address is the WAN IP address or domain name of the remote IPSec router 
(secure gateway).

If the remote secure gateway has a static WAN IP address, enter it in the Secure Gateway 
Address field. You may alternatively enter the remote secure gateway’s domain name (if it 
has one) in the Secure Gateway Address field. 

You can also enter a remote secure gateway’s domain name in the Secure Gateway Address 
field if the remote secure gateway has a dynamic WAN IP address and is using DDNS. The 
ZyXEL Device has to rebuild the VPN tunnel each time the remote secure gateway’s WAN IP 
address changes (there may be a delay until the DDNS servers are updated with the remote 
gateway’s new WAN IP address). 

If the remote secure gateway has a dynamic WAN IP address and does not use DDNS, enter 
0.0.0.0 as the secure gateway’s address. In this case only the remote secure gateway can 
initiate SAs. This may be useful for telecommuters initiating a VPN tunnel to the company 
network (see 

 for configuration examples).

The Secure Gateway IP Address may be configured as 0.0.0.0 only when using IKE key 
management and not Manual key management.

The following figure helps explain the main fields in the web configurator.

Figure 120   IPSec Summary Fields

Local and remote IP addresses must be static.

Click Security and VPN to open the VPN Setup screen. This is a read-only menu of your 
IPSec rules (tunnels). The IPSec summary menu is read-only. Edit a VPN by selecting an 
index number and then configuring its associated submenus.