User manual ZYXEL NBG5715

[. . . ] Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate. Related Documentation • Quick Start Guide The Quick Start Guide is designed to help you get your NBG5715 up and running right away. It contains information on setting up your network and configuring for Internet access. [. . . ] Sometimes, you might not know the IP address of the remote IPSec router (for example, telecommuters). In this case, you can still set up the IKE SA, but only the remote IPSec router can initiate an IKE SA. 2 IPSec SA (IKE Phase 2) Overview Once the NBG5715 and remote IPSec router have established the IKE SA, they can securely negotiate an IPSec SA through which to send data between computers on the networks. Note: The IPSec SA stays connected even if the underlying IKE SA is not available anymore. Local Network and Remote Network In an IPSec SA, the local network consists of devices connected to the NBG5715 and may be called the local policy. Similarly, the remote network consists of the devices connected to the remote IPSec router and may be called the remote policy. Note: It is not recommended to set a VPN rule’s local and remote network settings both to 0. This causes the NBG5715 to try to forward all access attempts (to the local network, the Internet or even the NBG5715) to the remote IPSec router. 4 The General Screen The following figure helps explain the main fields in the web configurator. Figure 78 IPSec Fields Summary Local Network Remote Network Remote IPSec Router VPN Tunnel Local IP Address Local and remote IP addresses must be static. Remote IP Address NBG5715 User’s Guide 123 Chapter 18 IPSec VPN Figure 79 Security > IPSec VPN > General The following table describes the fields in this screen. table 54 Security > IPSec VPN > General LABEL # Status DESCRIPTION This is the VPN policy index number. This displays the beginning and ending (static) IP addresses or a (static) IP address and a subnet mask of computer(s) on your local network behind your NBG5715. This displays the beginning and ending (static) IP addresses or a (static) IP address and a subnet mask of computer(s) on the remote network behind the remote IPSec router. Algorithm Gateway This field displays Tunnel or Transport mode (Tunnel is the default selection). This field displays the security protocol, encryption algorithm and authentication algorithm used for an SA. 0 when you configure the Secure Gateway Address field in the Rule Setup screen to 0. Click the Edit icon to go to the screen where you can edit the VPN rule. Modify Allow Through IPSec Tunnel Apply Cancel Select this check box to send NetBIOS packets through the VPN connection. 5 Edit VPN Rule Click on a policy’s Edit icon in the IPSec VPN > General screen to edit the VPN policy. 124 NBG5715 User’s Guide Chapter 18 IPSec VPN Note: The NBG5715 uses the system default gateway interface¡¦s WAN IP address as its WAN IP address to set up a VPN tunnel. You only configure VPN manual key when you select IKE in the IPSec Keying Mode field on the IPSec VPN > General > Edit screen. [. . . ] ONLY qualified service personnel should service or disassemble this device. Place connecting cables carefully so that no one will step on them or stumble over them. Always disconnect all cables from this device before servicing or disassembling. Connect the power adaptor or cord to the right supply voltage (for example, 110V AC in North America or 230V AC in Europe). [. . . ]