ZyXEL Communications ZYWALL 5 - V4.04 Podręcznik Użytkownika Pobierz pdf (Strona 181)

ZyXEL Confidential

404XD3C0.docx

181/181

Policies under

Static IKE rule

(configuration)

Policies under

Dynamic IKE rule

(configuration)

Runtime policies

(IKE negotiation)

Policies under

Static IKE rule

(configuration)

Compare Not compare Not compare

Policies under

Dynamic IKE rule

(configuration)

Not compare Not compare Not compare

Runtime policies

(IKE negotiation)

Compare Not compare Compare

Note:

(1) “Compare” means ZyWALL will compare policies in row with policies in column.

E.g. ZyWALL will compare “Policies under Static IKE rule” with other “Policies

under Static IKE rule”. On the other hand, a policy under dynamic rule will not

compare with other policies. During IKE negotiation, with peer policy information,

ZyWALL can use the result runtime policy to compare with policies under static

and dynamic IKE rules.

(2) Policies under Static/Dynamic IKE rule are rules in Romfile.

(3) Runtime policies are policies received from remote gateway. This remote gateway

acts as initiator and sends IKE request to ZyWALL. It matches one policy under

Dynamic IKE rule. ZyWALL will check whether the received policy conflict with

other policies.

(4) IP address 0.0.0.0 under Static IKE rule means “Any Address”. So it will overlap

with all IP address.

(5) Since “Remote Network” of Network Policy under Dynamic IKE rule can only be

determined when tunnel negotiation, ZyWALL skip conflict checking when

configuration. It is only compared during IKE negotiation.

1 2 ... 176 177 178 179 180 181

Brak uwag

ZyXEL Communications ZYWALL 5 - V4.04 Podręcznik Użytkownika Strona 181