ZyXEL 202H 91-003-194001B Manual Do Utilizador

P-202H Plus v2 User’s Guide

Chapter 11 VPN Screens

124

Negotiation Mode 

Select Main or Aggressive from the drop-down list box. The ZyXEL Device's 

negotiation mode should be identical to that on the remote secure gateway. 

Local

Local IP addresses must be static and correspond to the remote IPSec router's 

configured remote IP addresses. 
Two active SAs can have the same configured local or remote IP address, but not 

both. You can configure multiple SAs between the same local and remote IP 

addresses, as long as only one is active at any time.
In order to have more than one active rule with the Secure Gateway IP Address 

field set to 0.0.0.0, the ranges of the local IP addresses cannot overlap between 

rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway IP Address 

field and the LAN's full IP address range as the local IP address, then you cannot 

configure any other active rules with the Secure Gateway IP Address field set to 

0.0.0.0.

Local Address Type Use the drop-down menu to choose Single, Range, or Subnet. Select Single for 

a single IP address. Select Range for a specific range of IP addresses. Select 

Subnet to specify IP addresses on a network by their subnet mask.

IP Address Start

When the Local Address Type field is configured to Single, enter a (static) IP 

address on the LAN behind your ZyXEL Device. When the Local Address Type 

field is configured to Range, enter the beginning (static) IP address, in a range of 

computers on your LAN behind your ZyXEL Device. When the Local Address 

Type field is configured to Subnet, this is a (static) IP address on the LAN behind 

your ZyXEL Device.

End/Subnet Mask

When the Local Address Type field is configured to Single, enter the IP address 

in the IP Address Start field again here. When the Local Address Type field is 

configured to Range, enter the end (static) IP address, in a range of computers 

on the LAN behind your ZyXEL Device. When the Local Address Type field is 

configured to Subnet, this is a subnet mask on the LAN behind your ZyXEL 

Device.

Remote
Remote IP addresses must be static and correspond to the remote IPSec router's 

configured local IP addresses. The remote fields do not apply when the Secure 

Gateway IP Address field is configured to 0.0.0.0. In this case only the remote 

IPSec router can initiate the VPN.
Two active SAs cannot have the local and remote IP address(es) both the same. 

Two active SAs can have the same local or remote IP address, but not both. You 

can configure multiple SAs between the same local and remote IP addresses, as 

long as only one is active at any time.

Remote Address 

Type

Use the drop-down menu to choose Single, Range, or Subnet. Select Single 

with a single IP address. Select Range for a specific range of IP addresses. 

Select Subnet to specify IP addresses on a network by their subnet mask.

IP Address Start

When the Remote Address Type field is configured to Single, enter a (static) IP 

address on the network behind the remote IPSec router. When the Remote 

Address Type field is configured to Range, enter the beginning (static) IP 

address, in a range of computers on the network behind the remote IPSec router. 

When the Remote Address Type field is configured to Subnet, enter a (static) IP 

address on the network behind the remote IPSec router.

End/ Subnet Mask

When the Remote Address Type field is configured to Single, enter the IP 

address in the IP Address Start field again here. When the Remote Address 

Type field is configured to Range, enter the end (static) IP address, in a range of 

computers on the network behind the remote IPSec router. When the Remote 

Address Type field is configured to Subnet, enter a subnet mask on the network 

behind the remote IPSec router.

Table 37   VPN Rule Setup (continued)