ZyXEL Communications ZyWALL 70 Technical Information PDF herunterladen (Seite 13)

ZyWALL 1050 Support Notes

Remote Gateway:

[0] isakmp policy RemoteSite

[1] mode main

[2] transform-set des-md5

[3] lifetime 86400

[4] no natt

[5] dpd

[6] local-ip interface ge2

[7] peer-ip 210.110.7.1 0.0.0.0

[8] authentication pre-share

[9] keystring 123456789

[10] local-id type ip 167.35.4.3

[11] peer-id type ip 210.110.7.1

[12] peer-id type ip 210.110.7.1

[13] xauth type server default deactivate

[14] group1

[15] exit

Policy Route for VPN traffic:

[0] policy 1

[1] no deactivate

[2] no description

[3] no user

[4] interface ge1

[5] source LAN_SUBNET

[6] destination Remote_Subnet

[7] no schedule

[8] service any

[9] no snat

[10] next-hop tunnel RemoteTunnel

[11] no bandwidth

[12] exit

Tips for application:

1. Make sure the presharekey is the same in both local and remote gateways.

2. Make sure the IKE & IPSec proposal is the same in both local and remote gateways.

3. Select the correct interface for VPN connection.

4. The Local and Peer ID type and content must the opposite and contain the same.

5. Make sure the VPN policy route has been configured in ZyWALL1050.

1 2 ... 8 9 10 11 12 13 14 15 16 17 18 ... 297 298

Keine Kommentare

ZyXEL Communications ZyWALL 70 Technical Information Seite 13