Home » ZyXEL Manuals » Networking » ZyXEL P-661H-D1 » Manual Viewer

ZyXEL P-661H-D1 User Guide - Page 223

Security > VPN > Setup > Edit, Table 58

Get ZyXEL P-661H-D1 PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 223 highlights

Chapter 16 VPN Table 58 Security > VPN > Setup > Edit LABEL DESCRIPTION Tunnel Name Type up to 32 characters to identify this VPN policy. You may use any character, including spaces, but the ZyXEL Device drops trailing spaces. Mode Select net-net or Roadwarrior from the drop-down list box. Multiple SAs connecting through a secure gateway must have the same negotiation mode. Local Specify the IP addresses of the devices behind the ZyXEL Device that can use the VPN tunnel. The local IP addresses must correspond to the remote IPSec router's configured remote IP addresses. Local Address Type IP Address Start End / Subnet Mask Remote Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the same local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time. Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP address. Select Subnet to specify IP addresses based on the subnet mask. When the Local Address Type field is configured to Single, enter a (static) IP address on the LAN behind your ZyXEL Device. When the Local Address Type field is configured to Subnet, enter an IP address on the LAN behind your ZyXEL Device. When the Local Address Type field is configured to Single, this field is N/A. When the Local Address Type field is configured to Subnet, enter the subnet of the LAN behind your ZyXEL Device. Specify the IP addresses of the devices behind the remote IPSec router that can use the VPN tunnel. The remote IP addresses must correspond to the remote IPSec router's configured local IP addresses. Remote Address Type IP Address Start End / Subnet Mask Address Information WAN Interface My IP Address Two active SAs cannot have the local and remote IP address(es) both the same. Two active SAs can have the same local or remote IP address, but not both. You can configure multiple SAs between the same local and remote IP addresses, as long as only one is active at any time. Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP address. Select Subnet to specify IP addresses based on the subnet mask. When the Remote Address Type field is configured to Single, enter a (static) IP address on the network behind the remote IPSec router. When the Remote Address Type field is configured to Subnet, enter an IP Address on the LAN behind the IPSec router. When the Remote Address Type field is configured to Single, this field is N/A. When the Remote Address Type field is configured to Subnet, enter the subnet of the LAN behind the IPSec router. The interface used to connect to the internet My IP Address only shows the IP of the selected interface. There is no need to modify this information. P-661HNU-Fx User's Guide 223

Section	Page
P-661HNU-Fx	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
User’s Guide	19
Introduction	21
1.1 Overview	21
1.2 Applications for the ZyXEL Device	21
1.2.1 Internet Access	22
1.2.2 Wireless Connection	23
1.2.3 ZyXEL Device’s USB and Print Server Support	23
1.3 The WPS/WLAN Button	24
1.4 Ways to Manage the ZyXEL Device	25
1.5 Good Habits for Managing the ZyXEL Device	26
1.6 LEDs (Lights)	26
1.7 The RESET Button	27
Introducing the Web Configurator	29
2.1 Overview	29
2.1.1 Accessing the Web Configurator	29
2.2 The Web Configurator Layout	32
2.2.1 Title Bar	32
2.2.2 Main Window	33
2.2.3 Navigation Panel	33
Tutorials	37
3.1 Overview	37
3.2 Setting Up Your DSL Connection	37
3.3 How to Set up a Wireless Network	40
3.3.1 Example Parameters	41
3.3.2 Configuring the AP	41
3.3.3 Configuring the Wireless Client using the ZyXEL Utility	42
3.3.4 Configuring the Wireless Client using the WPS PIN number	49
3.4 Setting Up NAT Port Forwarding	50
3.5 Using the File Sharing Feature	52
3.5.1 Set Up File Sharing	52
3.5.2 Access Your Shared Files From a Computer	55
3.6 Using the Print Server Feature	55
3.7 Configuring the MAC Address Filter	70
3.8 Configuring Static Route for Routing to Another Network	71
3.9 Configuring QoS Queue and Class Setup	73
3.10 Access the ZyXEL Device Using DDNS	76
3.10.1 Registering a DDNS Account on www.dyndns.org	77
3.10.2 Configuring DDNS on Your ZyXEL Device	78
3.10.3 Testing the DDNS Setting	78
Technical Reference	79
Connection Status and System Info Screens	81
4.1 Overview	81
4.2 The Connection Status Screen	81
4.3 The System Info Screen	83
Broadband	87
5.1 Overview	87
5.1.1 What You Can Do in this Chapter	88
5.1.2 What You Need to Know	88
5.1.3 Before You Begin	89
5.2 The Broadband Screen	89
5.2.1 Add/Edit Internet Connection	90
5.3 The 3G Backup Screen	102
5.4 Technical Reference	104
Wireless	111
6.1 Overview	111
6.1.1 What You Can Do in this Chapter	111
6.1.2 Wireless Network Overview	111
6.1.3 Before You Begin	113
6.2 The Wireless General Screen	113
6.2.1 No Security	115
6.2.2 Basic (Static WEP/Shared WEP Encryption)	116
6.2.3 More Secure (WPA(2)-PSK)	118
6.2.4 WPA(2) Authentication	119
6.3 The More AP Screen	121
6.3.1 Edit More AP	122
6.4 The WPS Screen	123
6.5 The WMM Screen	125
6.6 Scheduling Screen	127
6.7 Technical Reference	127
6.7.1 Additional Wireless Terms	128
6.7.2 Wireless Security Overview	128
6.7.3 Signal Problems	131
6.7.4 BSS	131
6.7.5 MBSSID	132
6.7.6 WiFi Protected Setup (WPS)	132
Home Networking	141
7.1 Overview	141
7.1.1 What You Can Do in this Chapter	141
7.1.2 What You Need To Know	142
7.2 The LAN Setup Screen	145
7.3 The Static DHCP Screen	146
7.3.1 Before You Begin	146
7.4 The UPnP Screen	148
7.5 The File Sharing Screen	149
7.5.1 Before You Begin	149
7.5.2 Add/Edit File Sharing	151
7.5.3 Add New User	152
7.6 The Print Server Screen	153
7.6.1 Before You Begin	153
7.7 Technical Reference	154
7.8 Installing UPnP in Windows Example	158
7.9 Using UPnP in Windows XP Example	162
Routing	169
8.1 Overview	169
8.2 Configuring Static Route	170
8.2.1 Add/Edit Static Route	171
DNS Route	173
9.1 Overview	173
9.1.1 What You Can Do in this Chapter	174
9.2 The DNS Route Screen	174
9.2.1 Add/Edit DNS Route Edit	175
Quality of Service (QoS)	177
10.1 Overview	177
10.1.1 What You Can Do in this Chapter	177
10.1.2 What You Need to Know	178
10.2 The QoS General Screen	178
10.3 The Queue Setup Screen	180
10.3.1 Add/Edit a QoS Queue	181
10.4 The Class Setup Screen	181
10.4.1 Add/Edit QoS Class	183
10.5 The QoS Monitor Screen	186
10.6 QoS Technical Reference	187
10.6.1 IP Precedence	187
10.6.2 DiffServ	187
Network Address Translation (NAT)	189
11.1 Overview	189
11.1.1 What You Can Do in this Chapter	189
11.1.2 What You Need To Know	189
11.2 The Port Forwarding Screen	190
11.2.1 The Port Forwarding Screen	191
11.2.2 The Port Forwarding Edit Screen	192
11.3 The Sessions Screen	193
11.4 Technical Reference	194
11.4.1 NAT Definitions	194
11.4.2 What NAT Does	195
11.4.3 How NAT Works	195
Dynamic DNS	197
12.1 Overview	197
12.1.1 What You Need To Know	197
12.2 The Dynamic DNS Screen	198
Firewall	199
13.1 Overview	199
13.1.1 What You Can Do in this Chapter	199
13.1.2 What You Need to Know	200
13.2 The General Screen	201
13.3 The Services Screen	201
13.4 Firewall Technical Reference	203
13.4.1 Guidelines For Enhancing Security With Your Firewall	203
13.4.2 Security Considerations	203
MAC Filter	205
14.1 Overview	205
14.1.1 What You Need to Know	205
14.2 The MAC Filter Screen	206
Certificates	207
15.1 Overview	207
15.1.1 What You Can Do in this Chapter	207
15.1.2 What You Need to Know	207
15.1.3 Verifying a Certificate	209
15.2 Local Certificates	210
15.2.1 Trusted CAs	212
15.2.2 Trusted CA Import	213
15.2.3 View Certificate	213
15.3 VPN Certificates	215
15.3.1 Import Certificate	216
VPN	217
16.1 Overview	217
16.1.1 What You Can Do in the VPN Screens	217
16.1.2 What You Need to Know About IPSec VPN	218
16.1.3 Before You Begin	219
16.2 VPN Setup Screen	220
16.3 The VPN Edit Screen	222
16.4 Configuring Advanced Settings	226
16.5 Viewing SA Monitor	228
16.6 IPSec VPN Technical Reference	229
16.6.1 IPSec Architecture	229
16.6.2 IPSec and NAT	230
16.6.3 VPN, NAT, and NAT Traversal	231
16.6.4 Encapsulation	232
16.6.5 IKE Phases	233
16.6.6 Negotiation Mode	234
16.6.7 Remote DNS Server	234
16.6.8 ID Type and Content	235
16.6.9 Pre-Shared Key	237
16.6.10 Diffie-Hellman (DH) Key Groups	237
16.6.11 Telecommuter VPN/IPSec Examples	237
System Monitor	241
17.1 Overview	241
17.1.1 What You Can Do in this Chapter	241
17.2 The WAN Status Screen	241
17.3 The LAN Status Screen	242
17.4 The NAT Status Screen	243
17.5 The 3G Backup Status Screen	244
User Account	245
18.1 Overview	245
18.2 The User Account Screen	245
Remote MGMT	247
19.1 Overview	247
19.1.1 What You Need to Know	247
19.2 The Remote MGMT Screen	248
System	249
20.1 Overview	249
20.1.1 What You Need to Know	249
20.2 The System Screen	249
Time Setting	251
21.1 Overview	251
21.2 The Time Setting Screen	251
Log Setting	253
22.1 Overview	253
22.2 The Log Setting Screen	253
Firmware Upgrade	255
23.1 Overview	255
23.2 The Firmware Screen	255
Backup/Restore	257
24.1 Overview	257
24.2 The Backup/Restore Screen	257
24.3 The Reboot Screen	259
Diagnostic	261
25.1 Overview	261
25.1.1 What You Can Do in this Chapter	261
25.2 The Ping Screen	261
25.3 The DSL Line Screen	262
Troubleshooting	265
26.1 Overview	265
26.2 Power, Hardware Connections, and LEDs	265
26.3 ZyXEL Device Access and Login	266
26.4 Internet Access	268
26.5 Wireless Internet Access	270
26.6 USB Device Connection	271
26.7 UPnP	272
Product Specifications	273
IP Addresses and Subnetting	283
Setting Up Your Computer’s IP Address	295
Pop-up Windows, Java Script and Java Permissions	325
Wireless LANs	335
Common Services	359
Open Software Announcements	363
Legal Information	393

Match case Limit results 1 per page

Chapter 16 VPN

P-661HNU-Fx User’s Guide

223

Tunnel Name

Type up to 32 characters to identify this VPN policy. You may use any

character, including spaces, but the ZyXEL Device drops trailing spaces.

Mode

Select

net-net

Roadwarrior

from the drop-down list box. Multiple

SAs connecting through a secure gateway must have the same

negotiation mode.

Local

Specify the IP addresses of the devices behind the ZyXEL Device that

can use the VPN tunnel. The local IP addresses must correspond to the

remote IPSec router's configured remote IP addresses.

Two active SAs cannot have the local and remote IP address(es) both

the same. Two active SAs can have the same local or remote IP

address, but not both. You can configure multiple SAs between the

same local and remote IP addresses, as long as only one is active at

any time.

Local Address

Type

Use the drop-down menu to choose

Single

, or

Subnet

. Select

Single

for a single IP address. Select

Subnet

to specify IP addresses based on

the subnet mask.

IP Address Start

When the

Local Address Type

field is configured to

Single

, enter a

(static) IP address on the LAN behind your ZyXEL Device. When the

Local Address Type

field is configured to

Subnet

, enter an IP

address on the LAN behind your ZyXEL Device.

End / Subnet

Mask

When the

Local Address Type

field is configured to

Single

, this field

is N/A. When the

Local Address Type

field is configured to

Subnet

enter the subnet of the LAN behind your ZyXEL Device.

Remote

Specify the IP addresses of the devices behind the remote IPSec router

that can use the VPN tunnel. The remote IP addresses must correspond

to the remote IPSec router's configured local IP addresses.

Two active SAs cannot have the local and remote IP address(es) both

the same. Two active SAs can have the same local or remote IP

address, but not both. You can configure multiple SAs between the

same local and remote IP addresses, as long as only one is active at

any time.

Remote Address

Type

Use the drop-down menu to choose

Single

, or

Subnet

. Select

Single

for a single IP address. Select

Subnet

to specify IP addresses based on

the subnet mask.

IP Address Start

When the

Remote Address Type

field is configured to

Single

, enter a

(static) IP address on the network behind the remote IPSec router.

When the

Remote Address Type

field is configured to

Subnet

, enter

an IP Address on the LAN behind the IPSec router.

End / Subnet

Mask

When the

Remote Address Type

field is configured to

Single

, this

field is N/A. When the

Remote Address Type

field is configured to

Subnet

, enter the subnet of the LAN behind the IPSec router.

Address

Information

WAN Interface

The interface used to connect to the internet

My IP Address

My IP Address only shows the IP of the selected interface. There is no

need to modify this information.

Table 58

Security > VPN > Setup > Edit

LABEL

DESCRIPTION