Site To Site Vpn Solutions (Zywall Usg 2000 To Zywall70) - ZyXEL Communications ZYWALL USG 2000 Support Notes

1.2.1 Site to site VPN solutions (ZyWALL USG 2000 to ZyWALL70)

The exciting ZyWALL35 or 70 in central office gateway can be replaced by ZyWALL USG
2000, and the ZyWALL35 or 70 moved to a remote office. The ZyWALL USG 2000 can
provide higher VPN throughput and deal with multiple VPN tunnels at the same time. To show
how to build tunnel between ZyWALL5/35/70 and ZyWALL USG 2000 we used ZyWALL 70
as an example.
CenterOffice Gateway
LAN: 192.168.1.X
1) Login ZyWALL USG 2000 GUI and setup the ge2 interface for the internet connection
and manually assign a static IP. The configuration path is ZyWALL USG 2000 > Network
> Interface > Edit > ge2
2) Switch to VPN > IPSec VPN > VPN Gateway, select My Address as interface ge2 and
then in Security Gateway Address field set the remote gateway IP to 167.35.4.3. The
Local ID Type and content are IP and 210.110.7.1, Peer ID Type and content are IP and
All contents copyright (c) 2008 ZyXEL Communications Corporation.
Static IP address
210.110.7.1
Internet
ZyWALL USG 2000 Support Notes
Static IP address
167.35.4.3
Branch Gateway
LAN: 192.168.2.X
1
19