ZyXEL Communications P-660HNU-Fx User Manual

Page of 366
Chapter 16 VPN
ADSL Series User’s Guide
208
Local
Specify the IP addresses of the devices behind the ZyXEL Device that can use the VPN 
tunnel. The local IP addresses must correspond to the remote IPSec router's 
configured remote IP addresses. 
Two active SAs cannot have the local and remote IP address(es) both the same. Two 
active SAs can have the same local or remote IP address, but not both. You can 
configure multiple SAs between the same local and remote IP addresses, as long as 
only one is active at any time.
Local Address Type
Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP 
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start 
When the Local Address Type field is configured to Single, enter a (static) IP 
address on the LAN behind your ZyXEL Device. When the Local Address Type field is 
configured to Subnet, enter an IP address on the LAN behind your ZyXEL Device.
End / Subnet Mask
When the Local Address Type field is configured to Single, this field is N/A. When 
the Local Address Type field is configured to Subnet, enter the subnet of the LAN 
behind your ZyXEL Device.
Remote
Specify the IP addresses of the devices behind the remote IPSec router that can use 
the VPN tunnel. The remote IP addresses must correspond to the remote IPSec 
router's configured local IP addresses. 
Two active SAs cannot have the local and remote IP address(es) both the same. Two 
active SAs can have the same local or remote IP address, but not both. You can 
configure multiple SAs between the same local and remote IP addresses, as long as 
only one is active at any time.
Remote Address 
Type
Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP 
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start 
When the Remote Address Type field is configured to Single, enter a (static) IP 
address on the network behind the remote IPSec router. When the Remote Address 
Type
 field is configured to Subnet, enter an IP Address on the LAN behind the IPSec 
router.
End / Subnet Mask
When the Remote Address Type field is configured to Single, this field is N/A. When 
the Remote Address Type field is configured to Subnet, enter the subnet of the LAN 
behind the IPSec router.
Address Information
WAN Interface
The interface used to connect to the internet
My IP Address
My IP Address only shows the IP of the selected interface. There is no need to modify 
this information.
Secure Gateway 
Address
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with 
which you're making the VPN connection. 
If you are not sure of this information you can leave it blank, but do not use 0.0.0.0. 
Local ID
Select IP to identify this ZyXEL Device by its IP address. 
Select DNS to identify this ZyXEL Device by a domain name.
Select E-mail to identify this ZyXEL Device by an e-mail address.
Table 63   
Security > VPN > Setup > Edit
LABEL
DESCRIPTION