ZyXEL Communications ZYWALL USG 1000 Support Notes page 127

traffic to go back through the original path(FTP server
ZyWALL 2 Plus
5. Test either when primary or secondary VPN tunnel is on, the PC behind ZyWALL 2 Plus
should be able to reach the FTP server by ping.
The IP addresses and configuration of the VPN setting on the three devices are as shown
below.
ZyWALL USG-A
My Address ge2, 59.124.163.154
Security
Gateway
Address
Local ID Type
Peer ID Type
Local
Subnet, 192.168.1.0
Remote
Subnet, 192.168.3.0
SNAT
Negotiation
Mode
Pre-share key
Encryption
Authentication
Key Group
All contents copyright (c) 2007 ZyXEL Communications Corporation.
PC).
Main office
0.0.0.0
Fail back check Interval: 180sec
IP, 0.0.0.0
Any
Change
192.168.3.0
192.168.1.0
to
192.168.30.0
192.168.1.0
Main
123456789
DES
MD5
DH1
ZyWALL USG 1000 Support Notes
ES-4024A
ZyWALL 2 Plus
0.0.0.0
Primary: 59.124.163.154
Secondary: 59.124.163.155
Fail back check: Enable
IP, 0.0.0.0
IP, 0.0.0.0
Subnet, 192.168.3.0
Subnet, 192.168.1.0
N/A
Phase1
Main
123456789
DES
MD5
DH1
Phase2
ZyWALL USG-B
Branch office
ZyWALL USG-B
ge2, 59.124.163.155
0.0.0.0
IP, 0.0.0.0
Any
Subnet, 192.168.2.0
Subnet, 192.168.3.0
Change
192.168.3.0
192.168.1.0
to
192.168.31.0
192.168.1.0
Main
123456789
DES
MD5
DH1
127