User manual ZYXEL VANTAGE UPGRADE

[. . . ] Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. This publication is subject to change without notice. Trademarks ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL Communications, Inc. Other trademarks mentioned in this publication are used for identification purposes only and may be properties of their respective owners. Copyright 2 Vantage CNM User's Guide ZyXEL Limited Warranty ZyXEL warrants that (a) the Vantage CNM software (henceforth called the SOFTWARE) will perform substantially in accordance with the accompanying written materials for a period of ninety (90) days from the date of receipt, and (b) any Support Services provided by ZyXEL shall be substantially as described in applicable written materials provided to you by ZyXEL, and ZyXEL support engineers will make commercially reasonable efforts to solve any problem issues. [. . . ] Tunnel mode is fundamentally an IP tunnel with authentication and encryption. This is the most common mode of operation Select an encryption algorithm from the pull-down menu. 3DES is more powerful but increases latency. The Authentication Algorithms, HMAC-MD5 (RFC 2403) and HMAC-SHA1 (RFC 2404, provide an authentication mechanism for the AH and ESP protocols. Select MD5 for minimal security and SHA-1 for maximum security. MD5 (Message Digest 5) produces a 128-bit digest to authenticate packet data. SHA-1 (Secure Hash Algorithm) produces a 160-bit digest to authenticate packet data. Define the length of time before an IKE Security Association automatically renegotiates in this field. It may range from 60 to 3, 000, 000 seconds (almost 35 days). A short SA Life Time increases security by forcing the two VPN gateways to update the encryption and authentication keys. However, every time the VPN tunnel renegotiates, all users accessing remote resources are temporarily disconnected. When the Address Type field is configured to Range, enter the end (static) IP address, in a range of computers on the LAN behind the ZyXEL device. When the Address Type field is configured to Subnet, this is a subnet mask on the LAN behind the ZyXEL device. Type a number (base 10) from 1 to 999999 for the Security Parameter Index. Select ESP if you want to use ESP (Encapsulation Security Payload). The ESP protocol (RFC 2406) provides encryption as well as some of the services offered by AH. If you select ESP here, you must select options from the Encryption Algorithm and Authentication Algorithm fields. Select AH if you want to use AH (Authentication Header Protocol). The AH protocol (RFC 2402) was designed for integrity, authentication, sequence integrity (replay resistance), and non-repudiation but not for confidentiality, for which the ESP was designed. If you select AH here, you must select options from the Authentication Algorithm field. Select Tunnel mode or Transport mode from the drop-down list box. Select DES, 3DES or NULL from the drop-down list box. [. . . ] Any rights not expressly granted by ZyXEL to you are reserved by ZyXEL, and all implied licenses are disclaimed. 2. Ownership You have no ownership rights in the Software. Rather, you have a license to use the Software as long as this License Agreement remains in full force and effect. Ownership of the Software, Documentation and all intellectual property rights therein shall remain at all times with ZyXEL. Any other use of the Software by any other entity is strictly forbidden and is a violation of this License Agreement. 3. Copyright The Software and Documentation contain material that is protected by United States Copyright Law and trade secret law, and by international treaty provisions. [. . . ]