ZyXEL Communications 5 Series User Manual

Page of 824
Chapter 19 IPSec VPN
ZyWALL 5/35/70 Series User’s Guide
374
19.6  The Network Policy Move Screen
Click the move (
) icon in the VPN Rules (IKE) screen to display the VPN Rules (IKE): 
Network Policy Move screen. 
A VPN (Virtual Private Network) tunnel gives you a secure connection to another computer or 
network. Each VPN tunnel uses a single gateway policy and one or more network policies.
• The gateway policy contains the IKE SA settings. It identifies the IPSec routers at either 
end of a VPN tunnel. 
• The network policy contains the IPSec SA settings. It specifies which devices (behind the 
IPSec routers) can use the VPN tunnel.
Use this screen to associate a network policy to a gateway policy.
Figure 213   SECURITY > VPN > VPN Rules (IKE) > Move Network Policy 
The following table describes the labels in this screen. 
Table 104   SECURITY > VPN > VPN Rules (IKE) > Move Network Policy
LABEL
DESCRIPTION
Network Policy 
Information 
The following fields display the general network settings of this VPN policy. 
Name
This field displays the policy name. 
Local Network 
This field displays one or a range of IP address(es) of the computer(s) behind the 
ZyWALL. 
Remote Network
This field displays one or a range of IP address(es) of the remote network behind 
the remote IPsec router. 
Gateway Policy 
Information
Gateway Policy
Select the name of a VPN rule (or gateway policy) to which you want to associate 
this VPN network policy. 
If you do not want to associate a network policy to any gateway policy, select 
Recycle Bin from the drop-down list box. The Recycle Bin gateway policy is a 
virtual placeholder for any network policy(ies) without an associated gateway 
policy. When there is a network policy in Recycle Bin, the Recycle Bin gateway 
policy automatically displays in the VPN Rules (IKE) screen.  
Apply
Click Apply to save the changes. 
Cancel Click 
Cancel to discard all changes and return to the main VPN screen.