ZyXEL Communications UAG5100 User Manual page 363

Chapter 30 IPSec VPN
Figure 251 IPSec VPN Example
LAN
LAN
1.2.3.4 2.2.2.2
192.168.1.0/24
172.16.1.0/24
UAG X uses 1.2.3.4 as its public address, and remote IPSec router Y uses 2.2.2.2. Create the VPN
tunnel between the UAG's LAN subnet (192.168.1.0/24) and the LAN subnet behind the peer IPSec
router (172.16.1.0/24).
Set Up the VPN Gateway that Manages the IKE SA
In Configuration > VPN > IPSec VPN > VPN Gateway > Add, enable the VPN gateway and
name it (VPN_GW_EXAMPLE here). Set My Address to Interface and select a WAN interface. Set
Peer Gateway Address to Static Address and enter the remote IPSec router's public IP address
(2.2.2.2 here) as the Primary. Set Authentication to Pre-Shared Key and enter 12345678. Click
OK.
UAG Series User's Guide
363