ZyXEL 2WG Guida Utente
Chapter 15 IPSec VPN Screens
ZyWALL 2WG User’s Guide
323
15.6.1 Configuring the Global Setting Screen
Click SECURITY > VPN > Global Setting to open the VPN Global Setting screen.
Figure 205 SECURITY > VPN > Global Setting
The following table describes the labels in this screen.
Table 92 SECURITY > VPN > Global Setting
LABEL
DESCRIPTION
Output Idle Timer
The ZyWALL disconnects a VPN tunnel if the remote IPSec router does not
reply for this number of seconds.
Input Idle Timer
When no traffic is received from a remote IPSec router after the specified
time period, the ZyWALL disconnects the VPN tunnel. 0 disables the check
(this is the default setting).
The output idle timer never takes effect if you set this timer to a shorter
The output idle timer never takes effect if you set this timer to a shorter
period.
Gateway Domain
Name Update Timer
If you use dynamic domain names in VPN rules to identify the ZyWALL and/
or the remote IPSec router, the IP address mapped to the domain name can
change. The VPN tunnel stops working after the IP address changes. Any
users of the VPN tunnel are disconnected until the ZyWALL gets the new IP
address from a DNS server and rebuilds the VPN tunnel.
Enter the time period (between 2 and 60 minutes) to set how often the
Enter the time period (between 2 and 60 minutes) to set how often the
ZyWALL queries a DNS server to update the IP address and domain name
mapping.
If the query returns a new IP address for a dynamic domain name, the
If the query returns a new IP address for a dynamic domain name, the
ZyWALL disconnects the VPN tunnel. The ZyWALL rebuilds the VPN tunnel
(using the new IP address) immediately if the IPSec SA is set to nailed up.
Otherwise the ZyWALL rebuilds the VPN tunnel when there are packets for it
or you manually dial it.
If the ZyWALL and all of the remote IPSec routers use static IP addresses or
If the ZyWALL and all of the remote IPSec routers use static IP addresses or
regular domain names, you can enter 0 to disable this feature.