Filter
Top Products
ZyWALL 2 Series User’s Guide
14-16 VPN Screens
Table 14-7 Basic IKE VPN Rule Edit
LABEL DESCRIPTION
Ending IP
Address/ Subnet
Mask
When the Address Type field is configured to Single Address, this field is N/A. When the
Address Type field is configured to Range Address, enter the end (static) IP address, in
a range of computers on the network behind the remote IPSec router. When the Address
Type field is configured to Subnet Address, enter a subnet mask on the network behind
the remote IPSec router.
DNS Server (for
IPSec VPN)
If there is a private DNS server that services the VPN, type its IP address here. The
ZyWALL assigns this additional DNS server to the ZyWALL's DHCP clients that have IP
addresses in this IPSec rule's range of local addresses.
A DNS server allows clients on the VPN to find other computers and servers on the VPN
by their (private) domain names.
Authentication Key
Pre-Shared Key
Select the Pre-Shared Key radio button and type your pre-shared key in this field. A pre-
shared key identifies a communicating party during a phase 1 IKE negotiation. It is called
"pre-shared" because you have to share it with another party before you can communicate
with them over a secure connection.
Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal ("0-9",
"A-F") characters. You must precede a hexadecimal key with a "0x” (zero x), which is not
counted as part of the 16 to 62 character range for the key. For example, in
"0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and
“0123456789ABCDEF” is the key itself.
Both ends of the VPN tunnel must use the same pre-shared key. You will receive a
“PYLD_MALFORMED” (payload malformed) packet if the same pre-shared key is not
used on both ends.
Certificate
Select the Certificate radio button to identify the ZyWALL by a certificate. This feature is
not available on the ZyWALL 2WE.
Use the drop-down list box to select the certificate to use for this VPN tunnel. You must
have certificates already configured in the My Certificates screen. Click My Certificates
to go to the My Certificates screen where you can view the ZyWALL's list of certificates.