(192.168.1.0/24) and the LAN subnet behind peer IPSec router Y (172.16.1.0/
24).
6.3.1 Set Up the VPN Gateway
The VPN gateway manages the IKE SA. You do not have to set up any other
objects before you configure the VPN gateway because this VPN tunnel does not
use any certificates or extended authentication.
Click VPN > IPSec VPN > VPN Gateway, and then click the Add icon.
1
Give the VPN gateway a name ("VPN_GW_EXAMPLE"). For My Address, select
2
Interface and ge8. For the Peer Gateway Address, select Static Address and
enter 2.2.2.2 in field 1. For the Authentication, Select Pre-Shared Key and
enter 12345678. Click OK.
Figure 63 VPN > IPSec VPN > VPN Gateway > Add
6.3.2 Set Up the VPN Connection
The VPN connection manages the IPSec SA. You have to set up the address
objects for the local network and remote network before you can set up the VPN
connection.
Click Object > Address. Click the Add icon.
1
ZyWALL USG 2000 User's Guide
Chapter 6 Tutorials
125