ZyXEL Communications USG Series Vpn Configuration Manual page 14

Phase 2 Settings
SA Life Time​ : Leave the default of 86400 seconds
➔
Active Protocol​ : Leave the default of ​ E SP
➔
Encapsulation​ : Leave the default of ​ T unnel
➔
Proposal​ : ​ ​ F or security reasons, we recommend changing the default proposal settings to use at least ​ 3 DES​ and ​ S HA-1​ (with the option of using ​ A ES-128​ and ​ S HA-1​ ) as
➔
shown here
Perfect Forward Secrecy (PFS)​ : Choose ​ D H2​ from the pop-up
➔
It is possible to use different phase 2 settings. Please note that any changes you make here must be matched in VPN Tracker (Advanced > Phase 2). We recommend using the
settings shown here for initial setup and testing.
13