Chapter 21 IPSec VPN
USG20(W)-VPN Series User’s Guide
345
21.3 The VPN Gateway Screen
The
VPN Gateway
summary screen displays the IPSec VPN gateway policies in the USG, as well as
the USG’s address, remote IPSec router’s address, and associated VPN connections for each one. In
addition, it also lets you activate and deactivate each VPN gateway. To access this screen, click
Configuration > VPN
>
Network
>
IPSec VPN
>
VPN Gateway
. The following screen appears.
SNAT
Select the address object that represents the translated source address (or select
Create Object
to configure a new one). This is the address that hides the original
source address. The size of the original source address range (
Source
) must be
equal to the size of the translated source address range (
SNAT
).
Destination NAT
This translation forwards packets (for example, mail) from the remote network to a
specific computer (for example, the mail server) in the local network.
Add
Click this to create a new entry. Select an entry and click
Add
to create a new entry
after the selected entry.
Edit
Select an entry and click this to be able to modify it.
Remove
Select an entry and click this to delete it.
Move
To change an entry’s position in the numbered list, select it and click
Move
to display
a field to type a number for where you want to put that entry and press [ENTER] to
move the entry to the number that you typed.
#
This field is a sequential value, and it is not associated with a specific NAT record.
However, the order of records is the sequence in which conditions are checked and
executed.
Original IP
Select the address object that represents the original destination address. This is the
address object for the remote network.
Mapped IP
Select the address object that represents the desired destination address. For
example, this is the address object for the mail server.
Protocol
Select the protocol required to use this translation. Choices are:
TCP
,
UDP
, or
All
.
Original Port Start
/ Original Port End
These fields are available if the protocol is
TCP
or
UDP
. Enter the original destination
port or range of original destination ports. The size of the original port range must be
the same size as the size of the mapped port range.
Mapped Port Start
/ Mapped Port End
These fields are available if the protocol is
TCP
or
UDP
. Enter the translated
destination port or range of translated destination ports. The size of the original port
range must be the same size as the size of the mapped port range.
OK
Click
OK
to save the changes.
Cancel Click
Cancel
to discard all changes and return to the main VPN screen.
Table 135
Configuration > VPN > IPSec VPN > VPN Connection > Edit (continued)
LABEL
DESCRIPTION
Summary of Contents for ZyWall USG20-VPN
Page 17: ...17 PART I User s Guide ...
Page 18: ...18 ...
Page 99: ...99 PART II Technical Reference ...
Page 100: ...100 ...
