What Could Go Wrong - ZyXEL Communications VPN Series Handbook

Security firewalls

Table of Contents

To test whether or not a tunnel is working, ping from a computer at one site to a

computer at the other. Ensure that both computers have Internet access (via the

IPSec devices).

PC behind ZyWALL/USG (HQ) > Window 7 > cmd > ping 192.168.20.33

PC behind ZyWALL/USG (Branch) > Window 7 > cmd > ping 10.10.10.33

What Could Go Wrong?

If you see below [info] or [error] log message, please check ZyWALL/USG Phase

1 Settings. Both ZyWALL/USG at the HQ and Branch sites must use the same Pre-

Shared Key, Encryption, Authentication method, DH key group and ID Type to

establish the IKE SA.

MONITOR > Log

www.zyxel.com