Secure Gateway with Dynamic WAN IP Address

- P-335WT static WAN IP v.s. peer side dynamic IP
- P-335WT dynamic WAN IP v.s. peer side static IP

Most of the cases, static IP addresses are used for VPN tunneling endpoints. But for SOHO users, generally, it is a dynamic case. In this case, this IP will not be available to pre-defined in the VPN box. There are some tips when configuring ZyWALL in any dynamic case.

- ZyWALL static WAN IP v.s. peer side dynamic IP

> 1. In VPN settings of P-335WT, please specify the IP address of Secure Gateway as 0.0.0.0.

> 2. In remote side, generally speaking, most VPN clients will bind PPP/Ethernet adapter's dynamic IP address to IPSec automatically . The only thing you need to concern is to specify the interface you want to apply IPSec/VPN correctly. The rest parts are similar with that in static cases.

> 3. Afterward, the VPN connection can ONLY be initiated from dynamic side to static side in order to update its dynamic IP to the static side.

> 4. In peer side, Are you using Win2K built-in IPSec? In this case, W2K won't capture the dynamic IP address automatically for you. You have to obtain your dynamic IP address and then go back to IPSec configuration to setup your current IP address.

- P-335WT dynamic WAN IP v.s. peer side static IP

> 1. In VPN settings of P-335WT, please specify the IP address of My IP as 0.0.0.0. P-335WT will automatically bind it's current WAN IP address to IPSec.

> 2. IPSec tunnel in this case, can ONLY be initiated from P-335WT.