ZyXEL Communications ZYWALL USG 1000 Support Notes page 12

4) User can refer to the user guide to complete the rest of the settings for VPN tunnel.
5) The ZyWALL USG VPN is a route-based VPN. This means the VPN tunnel can be an
interface to route the VPN traffic. Thus, we need to configure a policy route for VPN
traffic from the local subnet to the remote subnet after configuring the VPN gateway and
connection (phase1 and phase2). The purpose of this policy route is to tell the ZyWALL
USG to send the traffic to VPN tunnel when the traffic flows from the local subnet to a
destination that is in the remote subnet. Switch to ZyWALL USG > Configuration > Policy
> Route > Policy Route and add a new policy route. The source and the destination
addresses are the local and remote subnets. The Next-Hop type is VPN tunnel. Then
choose the corresponding VPN connection rule from the VPN tunnel drop down menu.
Now, the VPN tunnel and routing is configured and user can start to test it.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
12