Test The Ipsec Vpn Tunnel - ZyXEL Communications ZyWALL 110 Handbook

Go to VPN > Branch Office VPN > Tunnel > Phase 2 Settings to create a Tunnel Name. Then,
8
select the Gateway. Make sure you enable Perfect Forward Secrecy and select Diffie-Hellman
Group 2. Then, scroll down Phase 2 Proposals and add the encryption types to match your
ZyWALL/USG's VPN Connection > Phase 2 Settings. Click Save.
Figure 317 VPN > Branch Office VPN > Tunnel > Phase 2 Settings

4.5.3 Test the IPSec VPN Tunnel

Go to ZyWALL/USG CONFIGURATION > VPN > IPSec VPN > VPN Connection, click Connect
1
on the upper bar. The Status connect icon is lit when the interface is connected.
Figure 318 CONFIGURATION > VPN > IPSec VPN > VPN Connection
Go to ZyWALL/USG MONITOR > VPN Monitor > IPSec and verify the tunnel Up Time and
2
Inbound(Bytes)/Outbound(Bytes) traffic.
Figure 319 MONITOR > VPN Monitor > IPSec
Go to WatchGuard System Status > VPN Statistics > Branch Office VPN and check the tunnel
3
Status is up and Bytes In (Incoming Data) and Bytes Out (Outgoing Data).
Figure 320 System Status > VPN Statistics > Branch Office
To test whether or not a tunnel is working, ping from a computer at one site to a computer at the
4
other. Ensure that both computers have Internet access (via the IPSec devices).
Chapter 4 Create Site-to-Site VPN Tunnels
ZyWALL/USG Series User's Guide
140