ZyXEL Communications ZyWALL USG Series Application Notes page 19

USG-40W with PPPOE WAN:
- PPPOE IP: 220.137.67.76
- Local subnet: 192.168.200.0/24
IPSec VPN Conditions:
Phase 1:
IKE version: IKEv2
Authentication: 1234567890
Local/Peer ID type: IPv4 0.0.0.0 / Any
Encryption Algorithm: 3DES
Authentication Algorithm: MD5
Key Group: DH1
Goal to achieve:
Establish an IPSec VPN tunnel between two USGs with the above configuration.
Step 1. Go to CONFIGURATION > VPN > IPSec VPN > VPN Gateway to open the
configuration screen.
Step 2. Click on the Add button to add a VPN gateway rule.
Step 3. To configure the VPN gateway rule, the user needs to fill-in:
- VPN gateway name
- Enable IKEv2 protocol
- Gateway address; both local (My Address) and peer (Peer GW Address)
- Authentication setting

Pre-Shared Key

ID Type setting (Local and Peer side)
- Phase-1 setting

Negotiation mode

Encryption algorithm

Authentication algorithm

Key Group
ZyXEL – USG Application Notes
Phase 2:
Active Protocol: ESP
Encapsulation Mode: Tunnel
Encryption Algorithm: DES
Authentication Algorithm: SHA1
Perfect Forward Secrecy: None
18