Filter
Top Products
Chapter 10 Interface
ZyWALL USG 1000 User’s Guide
217
10.8 Virtual Interfaces
Use virtual interfaces to tell the ZyWALL where to route packets. Virtual interfaces can also
be used in VPN gateways (see Chapter 20 on page 291) and VRRP groups (see Chapter 33 on
page 493).
Virtual interfaces can be created on top of Ethernet interfaces, VLAN interfaces, or bridge
interfaces. Virtual VLAN interfaces recognize and use the same VLAN ID. Otherwise, there is
no difference between each type of virtual interface. Network policies (for example, firewall
rules) that apply to the underlying interface automatically apply to the virtual interface as well.
Like other interfaces, virtual interfaces have an IP address, subnet mask, and gateway used to
make routing decisions. However, you have to manually specify the IP address and subnet
mask; virtual interfaces cannot be DHCP clients. Like other interfaces, you can restrict
bandwidth through virtual interfaces, but you cannot change the MTU. The virtual interface
uses the same MTU that the underlying interface uses. Unlike other interfaces, virtual
interfaces do not provide DHCP services, and they do not verify that the gateway is available.
10.8.1 Virtual Interfaces Add/Edit
This screen lets you configure IP address assignment and interface parameters for virtual
interfaces. To access this screen, click an Add icon next to an Ethernet interface, VLAN
interface, or bridge interface in the respective interface summary screen.
Authentication
Type
Select the authentication protocol to use for outgoing calls. Choices are:
CHAP/PAP - Your ZyWALL accepts either CHAP or PAP, as requested by the
computer you are dialing.
CHAP - Your ZyWALL accepts CHAP only.
PAP - Your ZyWALL accepts PAP only.
MSCHAP - Your ZyWALL accepts MSCHAP only.
MSCHAP-V2 - Your ZyWALL accepts MSCHAP-V2 only.
Timeout Type the number of seconds the ZyWALL tries to set up a connection before it
stops. Allowed values are 30 - 120.
Idle timeout Type the number of seconds the ZyWALL should wait for traffic before it
automatically disconnects the connection. Set this field to zero to disable the
idle timeout. Allowed values are 0 - 360.
Table 61 Network > Interface > Auxiliary (continued)
LABEL DESCRIPTION