ZyXEL Communications ZyWALL 110 Handbook page 159

Then, configure the Secure Gateway IP as the peer MS Azure's Gateway IP address (in the
4
example, 23.101.5.141); select My Address to be the interface connected to the Internet.
Set the desired Negotiation, Encryption, Authentication, Key Group and SA Life Time
settings. Please make sure you disable Dead Peer Detection (DPD) which is not supported in the
MS Azure Static Routing.
Type a secure Pre-Shared Key which is auto-generated by MS Azure (found under Windows Azure
Virtual Network > DASHBOARD > MANAGE KEY).
Figure 363 Quick Setup > VPN Setup Wizard > Welcome > Wizard Type > VPN Settings (Phase 1
Setting)
Note: For more information about the IPsec Parameters supported in MS Azure, see the
Microsoft Azure Documentation
connections.
Continue to Phase 2 Settings to select the desired Encapsulation, Encryption, Authentication,
5
and SA Life Time settings.
Set Local Policy to be the IP address range of the network connected to the ZyWALL/USG and
Remote Policy to be the IP address range of the network connected to the MS Azure. Click OK.
Chapter 4 Create Site-to-Site VPN Tunnels
About VPN devices
ZyWALL/USG Series User's Guide
159
for Site-to-Site VPN Gateway