User manual ZYXEL PRESTIGE 792H

[. . . ] Prestige 792H G. SHDSL Router with four-port switch User's Guide Version 3. 40 June 2004 Prestige 792H G. SHDSL Router Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. [. . . ] Click Cancel to return to the VPN IKE screen without saving your changes. 14. 12 Manual Key Setup Manual key management is useful if you have problems with IKE key management. 14. 12. 1 Security Parameter Index (SPI) An SPI is used to distinguish different SAs terminating at the same destination and using the same IPSec protocol. The SPI (Security Parameter Index) along with a destination IP address uniquely identify a particular Security Association (SA). The SPI is transmitted from the remote VPN gateway to the local VPN gateway. The local VPN gateway then uses the network, encryption and key values that the administrator associated with the SPI to establish the tunnel. VPN Screens 14-19 Prestige 792H G. SHDSL Router Current ZyXEL implementation assumes identical outgoing and incoming SPIs. 14. 13 Configuring Manual Key You only configure VPN Manual Key when you select Manual in the Key Management field on the VPN IKE screen. This is the VPN Manual Key screen as shown next. Figure 14-6 VPN Manual Key 14-20 VPN Screens Prestige 792H G. SHDSL Router The following table describes the labels in this screen. Table 14-9 VPN Manual Key LABEL IPSec Setup Active Select this check box to activate this VPN policy. You may use any character, including spaces, but the Prestige drops trailing spaces. Manual is a useful option for troubleshooting if you have problems using IKE key management. SPI Type a number (base 10) from 1 to 999999 for the Security Parameter Index. Encapsulation Mode Select Tunnel mode or Transport mode from the drop-down list box. DNS Server (for If there is a private DNS server that services the VPN, type its IP address here. The IPSec VPN) Prestige assigns this additional DNS server to the Prestige's DHCP clients that have IP addresses in this IPSec rule's range of local addresses. A DNS server allows clients on the VPN to find other computers and servers on the VPN by their (private) domain names. Local Local IP addresses must be static and correspond to the remote IPSec router's configured remote IP addresses. Two active SAs can have the same configured local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time. In order to have more than one active rule with the Secure Gateway Address field set to 0. 0. 0. 0, the ranges of the local IP addresses cannot overlap between rules. If you configure an active rule with 0. 0. 0. 0 in the Secure Gateway Address field and the LAN's full IP address range as the local IP address, then you cannot configure any other active rules with the Secure Gateway Address field set to 0. 0. 0. 0. Local Address Type Use the drop-down menu to choose Single, Range, or Subnet. Select Subnet to specify IP addresses on a network by their subnet mask. DESCRIPTION VPN Screens 14-21 Prestige 792H G. SHDSL Router Table 14-9 VPN Manual Key LABEL DESCRIPTION IP Address Start When the Local Address Type field is configured to Single, enter a (static) IP address on the LAN behind your Prestige. When the Local Address Type field is configured to Range, enter the beginning (static) IP address, in a range of computers on your LAN behind your Prestige. [. . . ] 1-1 Schedule Sets Duration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34-2 SCR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . See Sustain Cell Rate Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4, 27-3, 27-5, 27-8, 27-9, 27-10, 27-13, 27-14, 32-5 Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-3, 20-4 Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]