ZyXEL Communications ZyWall 35 Support Notes page 127

2. check Active check box and give a name to this policy.
3. Give this VPN rule a name, Branch_A.
4. Select Key Management to IKE and Negotiation Mode to Main.
5. In Local section, select Address Type to Range Address, set IP Address Start to 192.168.3.0, and End
to 192.168.3.255. This section covers the LAN segment of branch office A.
6. In Remote section, select Address Type to Range Address, set IP Address Start to 192.168.1.0 and End
to 192.168.2.255. This section covers the LAN segment of both headquarter and branch office B.
7. My IP Addr is the WAN IP of this ZyWALL, 202.3.1.1.
8. Set Secure Gateway Addr to the IP address of Headquarter, 202.1.1.1.
9. Select Encapsulation Mode to Tunnel.
10. Check the ESP check box. (AH can not be used in SUA/NAT case)
11. Select Encryption Algorithm to DES and Authentication Algorithm to SHA-1. These parameters are for
IKE phase 2 negotiation. You can set more detailed configuration by pressing Advanced button.
12. Enter the key string 12345678 in the Pre-shared Key text box, and click Apply.
All contents copyright (c) 2006 ZyXEL Communications Corporation.
ZyWALL 35 Support Notes
127