ZyXEL Communications ZyWALL 110 Handbook page 242

the same Protocol, Encapsulation, Encryption, Authentication method and PFS to establish
the IKE SA.
MONITOR > Log
13
Make sure the both ZyWALL/USG at the HQ and Branch sites security policies allow IPSec
VPN traffic. IKE uses UDP port 500, AH uses IP protocol 51, and ESP uses IP protocol 50.
14
Default NAT traversal is enable on ZyWALL/USG, please make sure the remote IPSec device
must also have NAT traversal enabled.
www.zyxel.com
242/749