ZyXEL Communications ZYWALL USG 1000 Support Notes page 118

Try to click the connect icon to confirm the VPN configuration correctness.
5) The next step is to configure the policy route. We need three policy routes to fulfill our
application. First policy route rule is to route the traffic destination of which is the host
located in a VPN remote subnet and the next-hop will be VPN tunnel. Second policy
route rule is for LAN host to internet, thus the next-hop will be ge3 that is connected to
the internet gateway ZyWALL USG B. The third rule is for the traffic coming from the
VPN tunnel and the destination is the internet. Then next-hop will be ge3.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
118