ZyXEL Communications ZYWALL USG 1000 Support Notes page 102

The address object AsiaRegion (192.168.10.0 – 192.168.15.0) and EuropeRegion
(192.168.20.0 – 192.168.25.0) are used for the two regional center VPN concentrators
employed. When Asia region site like ZyWALL5 (192.168.12.0) tries to access the other
region's remote site like ZyWALL70 (192.168.22.0) it will match these two addresses' object
ranges and ZyWALL USG can do next processing.
This ZyWALL USG is the local center of Asia region. We need to setup the VPN tunnel
between local sites ZyWALL5 and ZyWALL35 and Europe region center ZyWALL USG.
Follow the VPN parameter tables to setup the three VPN gateways (IKE / IPSec Phase1).
For detail steps please refer to the ZyWALL USG user guide. We have to configure a
secondary security gateway for the VPN gateway between both of the regional centers'
ZyWALL USGs. The VPN connection can fail over to secondary gateway in case the
parameter gateway fails.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
102