ZyXEL NBG420N Manuel d'utilisateur télécharger pdf (Page 167)

Chapter 15 IPSec VPN

NBG420N User’s Guide

167

You can usually provide a static IP address or a domain name for the remote IPSec router as

well. Sometimes, you might not know the IP address of the remote IPSec router (for example,

telecommuters). In this case, you can still set up the IKE SA, but only the remote IPSec router

can initiate an IKE SA.

15.1.4 IPSec SA (IKE Phase 2) Overview

Once the NBG420N and remote IPSec router have established the IKE SA, they can securely

negotiate an IPSec SA through which to send data between computers on the networks.

Note: The IPSec SA stays connected even if the underlying IKE SA is not available

anymore.

This section introduces the key components of an IPSec SA.

15.1.4.1 Local Network and Remote Network

In an IPSec SA, the local network consists of devices connected to the NBG420N and may be

called the local policy. Similarly, the remote network consists of the devices connected to the

remote IPSec router and may be called the remote policy.

Note: It is not recommended to set a VPN rule’s local and remote network settings

both to 0.0.0.0 (any). This causes the NBG420N to try to forward all access

attempts (to the local network, the Internet or even the NBG420N) to the

remote IPSec router. In this case, you can no longer manage the NBG420N.

15.2 The General Screen

Click Security > VPN to display the Summary screen. This is a read-only menu of your VPN

rules (tunnels). Edit a VPN rule by clicking the Edit icon.

Figure 104 Security > VPN > General

1 2 ... 162 163 164 165 166 167 168 169 170 171 172 ... 339 340

Pas de commentaire

ZyXEL NBG420N Manuel d'utilisateur Page 167