ZyXEL Communications ZYWALL 5 - V4.04 Manual de usuario descargar pdf (Pagina 6)

6/76

www.zyxel.com

1. [SPR: 100105242, 100105292] Since F/W version 2.12

[Symptom] PPTP might not be able to connect successfully if it is configured via Installation

Wizard/Quick Setup. This is because 1) Installation Wizard/Quick Setup only allows PPTP

based interface to be configured with Static IP. 2) Installation Wizard/Quick Setup doesn’t

allow user to configure PPTP based interface’s Gateway IP Address. This may caused PPTP

cannot connect successfully if the PPTP Server IP is not at the same subnet with PPTP’s based

interface

[Workaround]

Before dial PPTP connection, configure the Gateway IP of PPTP interface‘s based interface

IPSec VPN

1. [SPR: 070814169]

[Symptom] PKI does not interoperate with Windows CA server, when using SCEP.

2. [SPR: 070814168] Since F/W version 2.00

[Symptom] VPN tunnel could not be established when 1) a non ZyWALL peer gateway

reboot and 2) ZyWALL has a previous established Phase 1 with peer gateway, and the Phase 1

is not yet expired. Under those conditions, ZyWALL will continue to use the previous phase 1

SA to negotiate the Phase 2 SA. It would result in phase 2 negotiation to fail.

[Workaround] User could disable and re-enable phase 1 rule in ZyWALL or turn on DPD

function to resolve problem.

3. [SPR: 100429119] Since F/W version 2.11

[Symptom] VPN tunnel might be established with incorrect VPN Gateway

[Condition]

1) Prepare 2 ZyWALL and reset to factory default configuration on both ZyWALLs

2) On ZyWALL-A

(1) Create 2 WAN interfaces and configure WAN1 as DHCP Client

(2) Create 2 VPN Gateways. The “My Address” is configured as Interface type and select

WAN1 and WAN2 respectively

(3) Create 2 VPN Connections named VPN-A and VPN-B accordingly which bind on the

VPN Gateways we just created

3) On ZyWALL-B

(1) Create one WAN interface

(2) Create one VPN Gateway. The Primary Peer Gateway Address is configured as

WAN1 IP address of ZyWALL-A and the Secondary Peer Gateway Address is

configured as WAN2 IP address of ZyWALL-A

4) Connect the VPN tunnel from ZyWALL-B to ZyWALL-A and we can see VPN-A is

connected on ZyWALL-A

5) Unplug WAN1 cable on ZyWALL-A

1 2 3 4 5 6 7 8 9 10 11 ... 75 76

Sin comentarios

ZyXEL Communications ZYWALL 5 - V4.04 Manual de usuario Pagina 6