ZyXEL Communications ZYWALL 70 - V4.04 Podręcznik Użytkownika Pobierz pdf (Strona 111)

Appendix 16: The mechanism of ZyWALL IPSec policy IP conflict check:

ZyWALL classifies traffic to IPSec tunnels according to Network Policies. If there are

two Network Policies “conflicted”, it’s not possible for ZyWALL to classify traffic

correctly. Two policies will conflict if they satisfy both the following conditions at the

same time:

(1) IP address range of “Local Network” of two policies overlaps.

(2) IP address range of “Remote Network” of two policies overlaps.

For example, the following two Network Policies will conflict:

Policy 1:

Policy 2:

To ensure there are no conflicted rules, ZyWALL will compare Network Policy with all

other policies during configuration and IKE negotiation. The conflict check occurred at

the following situations:

(1) Save Network policy at configuration time

1 2 ... 106 107 108 109 110 111 112

Brak uwag

ZyXEL Communications ZYWALL 70 - V4.04 Podręcznik Użytkownika Strona 111