ZyXEL 202H 91-003-194003B Manual Do Utilizador

P-202H Plus v2 User’s Guide

Chapter 33 VPN/IPSec Setup

302

Local Addr 

Start

When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is 

a (static) IP address on the LAN behind your ZyXEL Device.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is 

the beginning (static) IP address, in a range of computers on the LAN behind your 

ZyXEL Device. 
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this 

is a (static) IP address on the LAN behind your ZyXEL Device.

Local Addr 

End / Mask

When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is 

the same (static) IP address as in the Local Addr Start field.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is 

the end (static) IP address, in a range of computers on the LAN behind your ZyXEL 

Device. 
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this 

is a subnet mask on the LAN behind your ZyXEL Device.

Encap

This field displays Tunnel mode or Transport mode. See earlier for a discussion of 

these. You need to finish configuring the VPN policy in menu 27.1.1.1 or 27.1.1.2 if ??? 

is displayed.

IPSec 

Algorithm

This field displays the security protocols used for an SA. ESP provides confidentiality 

and integrity of data by encrypting the data and encapsulating it into IP packets. 

Encryption methods include 56-bit DES and 168-bit 3DES. NULL denotes a tunnel 

without encryption.
AH (Authentication Header) provides strong integrity and authentication by adding 

authentication information to IP packets. This authentication information is calculated 

using header and payload data in the IP packet. This provides an additional level of 

security. AH choices are MD5 (default  - 128 bits) and SHA -1(160 bits).
Both AH and ESP increase the ZyXEL Device’s processing requirements and 

communications latency (delay).
You need to finish configuring the VPN policy in menu 27.1.1.1 or 27.1.1.2 if ??? is 

displayed.

Key Mgt

This field displays the SA’s type of key management, (IKE or Manual).

Remote Addr 

Start

When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is 

a static IP address on the network behind the remote IPSec router.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is 

the beginning (static) IP address, in a range of computers on the network behind the 

remote IPSec router.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this 

is a static IP address on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Addr field in SMT 

27.1.1 to 0.0.0.0.

Remote Addr 

End / Mask

When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SINGLE, this is 

the same (static) IP address as in the Remote Addr Start field.
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to RANGE, this is 

the end (static) IP address, in a range of computers on the network behind the remote 

IPSec router. 
When the Addr Type field in Menu 27.1.1 IPSec Setup is configured to SUBNET, this 

is a subnet mask on the network behind the remote IPSec router.
This field displays N/A when you configure the Secure Gateway Address field in SMT 

27.1.1 to 0.0.0.0.

Secure GW 

Addr

This is the WAN IP address or the domain name (up to the first 15 characters are 

displayed) of the IPSec router with which you are making the VPN connection. This field 

displays 0.0.0.0 when you configure the Secure Gateway Address field in SMT 27.1.1 

to 0.0.0.0. 

Table 100   Menu 27.1 IPSec Summary