ZyXEL Communications USG Series Vpn Configuration Manual page 10

Phase 1 Settings
SA Life Time​ : Leave the default of 86400 seconds
➔
Negotiation Mode​ : Leave the default of ​ M ain Mode
➔
Proposal​ : ​ ​ F or security reasons, we recommend changing the default proposal settings to use at least ​ 3 DES​ and ​ S HA-1​ (with the option of using ​ A ES-128​ and ​ S HA-1​ ) as
➔
shown here
Key Group​ : Choose ​ D H2​ from the pop-up
➔
Select the ​ N AT Traversal ​ c heckbox
➔
Make sure the ​ D ead Peer Detection (DPD) ​ c heckbox is selected
➔
It is possible to use different phase 1 settings. Please note that any changes you make here must be matched in VPN Tracker (Advanced > Phase 1). We recommend using the
settings shown here for initial setup and testing.
9