ZyXEL Communications 5 Series User Manual

Page of 824
Chapter 4 Wizard Setup
ZyWALL 5/35/70 Series User’s Guide
98
Figure 35   VPN Wizard: Network Setting
The following table describes the labels in this screen. 
Table 18   VPN Wizard: Network Setting
LABEL 
DESCRIPTION
Network Policy 
Property
Active
If the Active check box is selected, packets for the tunnel trigger the ZyWALL to build 
the tunnel. 
Clear the Active check box to turn the network policy off. The ZyWALL does not 
apply the policy. Packets for the tunnel do not trigger the tunnel.
Name
Type up to 32 characters to identify this VPN network policy. You may use any 
character, including spaces, but the ZyWALL drops trailing spaces.
Network Policy 
Setting
Local Network
Local IP addresses must be static and correspond to the remote IPSec router's 
configured remote IP addresses. 
Select Single for a single IP address. Select Range IP for a specific range of IP 
addresses. Select Subnet to specify IP addresses on a network by their subnet 
mask.
Starting IP 
Address
When the Local Network field is configured to Single, enter a (static) IP address on 
the LAN behind your ZyWALL. When the Local Network field is configured to Range 
IP
, enter the beginning (static) IP address, in a range of computers on the LAN behind 
your ZyWALL. When the Local Network field is configured to Subnet, this is a 
(static) IP address on the LAN behind your ZyWALL.
Ending IP 
Address/
Subnet Mask
When the Local Network field is configured to Single, this field is N/A. When the 
Local Network field is configured to Range IP, enter the end (static) IP address, in a 
range of computers on the LAN behind your ZyWALL. When the Local Network field 
is configured to Subnet, this is a subnet mask on the LAN behind your ZyWALL.
Remote 
Network
Remote IP addresses must be static and correspond to the remote IPSec router's 
configured local IP addresses. 
Select Single for a single IP address. Select Range IP for a specific range of IP 
addresses. Select Subnet to specify IP addresses on a network by their subnet 
mask.