ZyXEL Communications 70 Network Card User Manual


 
ZyWALL 70 Internet Security Appliance
15
Step 4. Use the forth wizard screen to configure IPSec settings.
Choose Tunnel mode or Transport mode.
Choose which protocol to use (ESP or AH)
for the IKE key exchange.
Choose an encryption algorithm or select
NULL to set up a tunnel without encryption.
Choose an authentication algorithm.
Set the IPSec SA lifetime. This field allows
you to determine how long the IPSec SA
should stay up before it times out.
Choose whether to enable Perfect Forward
Secrecy (PFS) using Diffie-Hellman public-
key cryptography. Select None (the default)
to disable PFS. DH1 refers to Diffie-Hellman
Group 1 a 768 bit random number. DH2
refers to Diffie-Hellman Group 2 a 1024 bit
(1Kb) random number (more secure, yet
slower).
Step 5. This read-only screen shows a summary of the VPN rule’s settings. Check whether what you
have configured is correct.
Click Finish to save and complete the wizard
setup. Otherwise, click Back to return to the
previous screen.