ZyXEL 2WG 사용자 가이드

 Chapter 15 IPSec VPN Screens

ZyWALL 2WG User’s Guide

Click SECURITY > VPN > Global Setting to open the VPN Global Setting screen. 

Figure 205   SECURITY > VPN > Global Setting  

The following table describes the labels in this screen. 

Table 92   SECURITY > VPN > Global Setting

Output Idle Timer

The ZyWALL disconnects a VPN tunnel if the remote IPSec router does not 

reply for this number of seconds. 

Input Idle Timer

When no traffic is received from a remote IPSec router after the specified 

time period, the ZyWALL disconnects the VPN tunnel. 0 disables the check 

(this is the default setting).
The output idle timer never takes effect if you set this timer to a shorter 

period.

Gateway Domain 

Name Update Timer

If you use dynamic domain names in VPN rules to identify the ZyWALL and/

or the remote IPSec router, the IP address mapped to the domain name can 

change. The VPN tunnel stops working after the IP address changes. Any 

users of the VPN tunnel are disconnected until the ZyWALL gets the new IP 

address from a DNS server and rebuilds the VPN tunnel. 
Enter the time period (between 2 and 60 minutes) to set how often the 

ZyWALL queries a DNS server to update the IP address and domain name 

mapping. 
If the query returns a new IP address for a dynamic domain name, the 

ZyWALL disconnects the VPN tunnel. The ZyWALL rebuilds the VPN tunnel 

(using the new IP address) immediately if the IPSec SA is set to nailed up. 

Otherwise the ZyWALL rebuilds the VPN tunnel when there are packets for it 

or you manually dial it. 
If the ZyWALL and all of the remote IPSec routers use static IP addresses or 

regular domain names, you can enter 0 to disable this feature.