ZyXEL Communications ZyWALL 110 Handbook page 167

www.zyxel.com
and ZyWALL IPSec VPN Client use the same Pre-Shared Key to establish the IKE SA.
MONITOR > Log
If you see [info] or [error] log message such as below, please check ZyWALL/USG
Phase 1 Settings. ZyWALL/USG and ZyWALL IPSec VPN Client must use the same
Encryption, Authentication method, DH key group and ID Type/Content to
establish the IKE SA.
MONITOR > Log
If you see that Phase 1 IKE SA process done but still get [alert] or [info] log
message as below, please check ZyWALL/USG Phase 2 Settings. ZyWALL/USG and
ZyWALL IPSec VPN Client must use the same Active Protocol, Encapsulation,
Proposal, PFS and set correct Local Policy to establish the IKE SA.
MONITOR > Log
If you see [alert] log message as below, please make sure you create a user
account for the ZyWALL IPSec VPN Client user on ZyWALL/USG or the external
authentication server. Or please check your password matches the settings in the
user account.
MONITOR > Log
167/749