ZyXEL Communications ZYWALL USG 1000 Support Notes page 123

ZyWALL USG 1000 Support Notes
After we finish the setting in ZyWALL 70 and ZyWALL USG A and B, the setup is complete.
The CLI commands for application:
Policy Route:
[0] policy 1
[1] no deactivate
[2] no description
[3] no user
[4] interface ge4
[5] source DMZ_SUBNET
[6] destination any
[7] no schedule
[8] service any
[9] next-hop trunk WAN_TRUNK
[10] snat outgoing-interface
[11] no bandwidth
[12] exit
Tips for application:
1. Make sure the Pre-Shared Key is the same in both local and remote gateways.
2. Make sure the IKE proposal is the same in both local and remote gateways.
3. Select the correct Interface for VPN connection on ZyWALL USG.
4. The Local and the Peer ID type and content must the opposite and not of the same content.
5. The Local Policy of ZyWALL USG should be within the range of 0.0.0.0-255.255.255.255.
Then it can take the role of a central controller of all the outgoing traffic from a branch.
123
All contents copyright (c) 2007 ZyXEL Communications Corporation.