Справочник Пользователя для ZyXEL Communications P-2602
P-2602H(W)(L)-DxA Series User’s Guide
Chapter 17 VPN Screens
229
17.9.1 ID Type and Content Examples
Two IPSec routers must have matching ID type and content configuration in order to set up a
VPN tunnel.
VPN tunnel.
The two ZyXEL Devices in this example can complete negotiation and establish a VPN
tunnel.
tunnel.
The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL
Device B’s Local ID type is IP, but ZyXEL Device A’s Peer ID type is set to E-mail. An “ID
mismatched” message displays in the IPSEC LOG.
Device B’s Local ID type is IP, but ZyXEL Device A’s Peer ID type is set to E-mail. An “ID
mismatched” message displays in the IPSEC LOG.
17.10 Pre-Shared Key
A pre-shared key identifies a communicating party during a phase 1 IKE negotiation
(see
(see
for more on IKE phases). It is called “pre-shared” because you
have to share it with another party before you can communicate with them over a secure
connection.
connection.
17.11 Editing VPN Policies
Click an Edit icon in the
to edit VPN policies.
Table 85 Matching ID Type and Content Configuration Example
ZYXEL DEVICE A
ZYXEL DEVICE B
Local ID type: E-mail
Local ID type: IP
Local ID content: tom@yourcompany.com
Local ID content: 1.1.1.2
Peer ID type: IP
Peer ID type: E-mail
Peer ID content: 1.1.1.2
Peer ID content: tom@yourcompany.com
Table 86 Mismatching ID Type and Content Configuration Example
ZYXEL DEVICE A
ZYXEL DEVICE B
Local ID type: IP
Local ID type: IP
Local ID content: 1.1.1.10
Local ID content: 1.1.1.10
Peer ID type: E-mail
Peer ID type: IP
Peer ID content: aa@yahoo.com
Peer ID content: N/A