ZyXEL 202H 91-003-194001B User Manual

P-202H Plus v2 User’s Guide

121

Chapter 11 VPN Screens

Two IPSec routers must have matching ID type and content configuration in order to set up a 
VPN tunnel. 

The two ZyXEL Devices in this example can complete negotiation and establish a VPN tunnel

The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL 
Device B’s Local ID type is IP, but ZyXEL Device A’s Peer ID type is set to E-mail. An “ID 
mismatched” message displays in the IPSEC LOG. 

E-mail

Type an e-mail address (up to 31 characters) by which to identify this ZyXEL 

Device.

The domain name or e-mail address that you use in the Content field is used for identification purposes 

only and does not need to be a real domain name or e-mail address.

Table 35   Peer ID Type and Content Fields

IP

Type the IP address of the computer with which you will make the VPN connection or 

leave the field blank to have the ZyXEL Device automatically use the address in the 

Secure Gateway Address field.

DNS

Type a domain name (up to 31 characters) by which to identify the remote IPSec 

router.

E-mail

Type an e-mail address (up to 31 characters) by which to identify the remote IPSec 

router.

The domain name or e-mail address that you use in the Content field is used for identification purposes 

only and does not need to be a real domain name or e-mail address. The domain name also does not 

have to match the remote router’s IP address or what you configure in the Secure Gateway IP 

Address field below.

Table 34   Local ID Type and Content Fields

Table 36   Matching ID Type and Content Configuration Example

Local ID type: E-mail

Local ID type: IP

Local ID content: tom@yourcompany.com

Local ID content: 1.1.1.2

Peer ID type: IP

Peer ID type: E-mail

Peer ID content: 1.1.1.2

Peer ID content: tom@yourcompany.com

Figure 51   Mismatching ID Type and Content Configuration Example

Local ID type: IP

Local ID type: IP

Local ID content: 1.1.1.10

Local ID content: 1.1.1.10