ZyXEL Communications ZYWALL USG 1000 Support Notes page 16

9) User can refer to the user guide to complete the rest of the settings for VPN tunnel.
10) The ZyWALL USG 1000 and ZyWALL USG 300 VPN are route-based VPN. This means
the VPN tunnel can be an interface to route the VPN traffic. Thus, we need to configure a
policy route for VPN traffic from the local subnet to the remote subnet after configuring
the VPN gateway and connection (phase1 and phase2). The purpose of this policy route is
to tell the ZyWALL USG 1000 to send the traffic to VPN tunnel when the traffic flows
from the local subnet to a destination that is in the remote subnet. Switch to ZyWALL
USG 1000 > Network > Routing > Policy Route and add a new policy route. The source
and the destination addresses are the local and remote subnets. The Next-Hop type is VPN
tunnel. Then choose the corresponding VPN connection rule from the VPN tunnel drop
down menu. Now, the VPN tunnel and routing is configured and user can start to test it.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
3
16