Zyxel-communications Internet Security Gateway ZyWALL 100 Uživatelský manuál stáhnout pdf (Strana 300)

ZyWALL 100 Internet Security Gateway

VPN/IPSec Setup 28-17

28.6 Manual Setup

You only configure Menu 27.1.1.2 – Manual Setup when you select Manual in the Key Management field

in Menu 27.1.1 – IPSec Setup. Manual key management is useful if you have problems with IKE key

management.

28.6.1 Active Protocol

This field is a combination of mode and security protocols used for the VPN. These parameters have been

discussed earlier.

Table 28-6 Active Protocol — Encapsulation and Security Protocol

MODE SECURITY PROTOCOL

Tunnel ESP

Transport AH

28.6.2 Security Parameter Index (SPI)

An SPI is used to distinguish different SAs terminating at the same destination and using the same IPSec

protocol. This data allows for the multiplexing of SAs to a single gateway. The SPI (Security Parameter

Index) along with a destination IP address uniquely identify a particular Security Association (SA). The SPI

is transmitted from the remote VPN gateway to the local VPN gateway. The local VPN gateway then uses

the network, encryption and key values that the administrator associated with the SPI to establish the tunnel.

Current ZyXEL implementation assumes identical outgoing and incoming SPIs.

To edit this menu, move the cursor to the Edit Manual Setup field in Menu 27.1.1 – IPSec Setup press

[SPACE BAR] to select Yes and then press [ENTER] to go to Menu 27.1.1.2 – Manual Setup.

1 2 ... 295 296 297 298 299 300 301 302 303 304 305 ... 355 356

Žádné komentáře

Zyxel-communications Internet Security Gateway ZyWALL 100 Uživatelský manuál Strana 300