ZyXEL Communications ZyWALL 70 Informações Técnicas descarregar pdf (Página 97)

ZyWALL 1050 Support Notes

Encapsulation Tunnel Tunnel Tunnel

Active

Protocol

ESP ESP ESP

Encryption DES DES DES

Authentication SHA1 SHA1 SHA1

PFS NONE NONE NONE

See the following step-by-step configuration:

1. Configuration on ZyWALL 1050-A

(1) LAN/WAN Network Setting

ge2’s IP address to 59.124.163.154 with subnet 255.255.255.224 and gateway 59.124.163.129.

Secondly, modify interface “ge1” to be as LAN network. Here we keep to use the default IP

address “192.168.1.0” with subnet 255.255.255.0. Moreover, configure the DHCP setting as a

DHCP server with the IP poor starting address, pool size accordingly and the proper DNS

server IP address which will apply to LAN PCs automatically. (By default, the “first DNS

server” is configured as “from ISP”. Since we configure the static IP address for ge2(WAN), it

won’t automatically get any DNS setting from ISP. So we have to change it to “Custom

Defined” and enter a proper DNS server’s IP address.)

(2). Dynamic VPN Setting with SNAT

Step1. Create Address Objects for further configuration

1. Go to menu Configuration > Network > Object > Address

2. Create one address for the local VPN network by clicking '+' icon

Name: Local_192_168_1

Subnet, 192.168.1.0/255.255.255.0

3. Create another one for the remote VPN network

Name: Remote_192_168_3

Subnet, 192.168.3.0/255.255.255.0

4. Create another one for the network behind ZyWALL1050-A performing SNAT

Name: Local_192_168_30

Subnet, 192.168.30.0/255.255.255.0

1 2 ... 92 93 94 95 96 97 98 99 100 101 102 ... 297 298

Sem comentários

ZyXEL Communications ZyWALL 70 Informações Técnicas Página 97