What Can Go Wrong - ZyXEL Communications ZyWALL ATP Series Handbook

www.zyxel.com

What Can Go Wrong?

If you see [info] log message such as below, please make sure both ZyWALL/USG
and ZyWALL IPSec VPN Client use the same Pre-Shared Key to establish the IKE
SA.
MONITOR > Log
If you see [info] or [error] log message such as below, please check ZyWALL/USG
Phase 1 Settings. ZyWALL/USG and ZyWALL IPSec VPN Client must use the same
Encryption, Authentication method, DH key group and ID Type/Content to
establish the IKE SA.
MONITOR > Log
If you see that Phase 1 IKE SA process done but still get [alert] or [info] log
message as below, please check ZyWALL/USG Phase 2 Settings. ZyWALL/USG
and ZyWALL IPSec VPN Client must use the same Active Protocol, Encapsulation,
Proposal, PFS and set correct Local Policy to establish the IKE SA.
MONITOR > Log
If you see [alert] log message as below, please make sure you create a user
account for the ZyWALL IPSec VPN Client user on ZyWALL/USG or the external
authentication server. Or please check your password matches the settings in
the user account.
MONITOR > Log
171/782