ZyXEL P-661H Series Manual de usuario descargar pdf (Pagina 188)

Chapter 12 VPN Screens

P-661H/HW Series User’s Guide

188

12.9.1 ID Type and Content Examples

Two IPSec routers must have matching ID type and content configuration in order to set up a

VPN tunnel.

The two ZyXEL Devices in this example can complete negotiation and establish a VPN

tunnel.

The two ZyXEL Devices in this example cannot complete their negotiation because ZyXEL

Device B’s Local ID type is IP, but ZyXEL Device A’s Peer ID type is set to E-mail. An “ID

mismatched” message displays in the IPSEC LOG.

12.10 Pre-Shared Key

A pre-shared key identifies a communicating party during a phase 1 IKE negotiation

(seeSection 12.12 on page 193for more on IKE phases). It is called “pre-shared” because you

have to share it with another party before you can communicate with them over a secure

connection.

12.11 Editing VPN Policies

Click an Edit icon in the VPN Setup Screen to edit VPN policies.

Table 76 Matching ID Type and Content Configuration Example

ZYXEL DEVICE A ZYXEL DEVICE B

Local ID type: E-mail Local ID type: IP

Local ID content: tom@yourcompany.com Local ID content: 1.1.1.2

Peer ID type: IP Peer ID type: E-mail

Peer ID content: 1.1.1.2 Peer ID content: tom@yourcompany.com

Table 77 Mismatching ID Type and Content Configuration Example

ZYXEL DEVICE A ZYXEL DEVICE B

Local ID type: IP Local ID type: IP

Local ID content: 1.1.1.10 Local ID content: 1.1.1.10

Peer ID type: E-mail Peer ID type: IP

Peer ID content: [email protected] Peer ID content: N/A

1 2 ... 183 184 185 186 187 188 189 190 191 192 193 ... 357 358

Sin comentarios

ZyXEL P-661H Series Manual de usuario Pagina 188