ZyXEL Communications ZyWALL ATP Series Handbook page 179

www.zyxel.com
Configure Phase 1 Proposal and Diffie-Hellman Group as the peer ZyWALL/USG
Advanced Settings' Phase 1 Settings > Proposal and Key Group.
VPN > IPsec > Wizard > Custom VPN Tunnel (No Template) > Phase 1 Proposal
Go to Phase 2 Selectors > Advanced and configure Phase 2 Proposal as the peer
ZyWALL/USG Advanced Settings' Phase 2 Settings > Proposal.
Set Local Address to be the IP address range of the network connected to the
FortiGate and Remote Address to be the IP address range of the network
connected to the ZyWALL/USG.
Make sure you uncheck Enable Perfect Forward Secrecy (PFS) if this function is
disabled in the peer ZyWALL/USG.
VPN > IPsec > Wizard > Custom VPN Tunnel (No Template) > Phase 2 Selectors
179/782