ZyXEL Communications ZYWALL USG 2000 Support Notes page 24

encrypted. To setup this VPN tunnel, the required settings for ZyWALL and FortiGate are
explained in the following sections.
Central Office Gateway
ZyWALL
LAN: 192.168.1.X
The central office gateway ZyWALL USG 2000's interface and VPN setting retain the same
setting as in the previous example. If you jumped this section first, please refer to 'ZyWALL
USG 2000 to ZYWALL70 VPN tunnel setting' on page 8.
This list below is to briefly show the VPN phase1 and phase2 configuration parameters:
WAN: 210.110.7.1
LAN: 192.168.1.0/24
Negotiation Mode : Main
Pre-share key: 123456789
Encryption :DES
Authentication :MD5
Key Group :DH1
Encapsulation: Tunnel
Active Protocol: ESP
Encryption: DES
Authentication: SHA1
Perfect Forward Secrecy (PFS): None
1) Configure the ZyWALL USG 2000 's VPN gateway and VPN connection as on the list.
Also, remember to configure the policy route for the VPN traffic routing. Refer to the
All contents copyright (c) 2008 ZyXEL Communications Corporation.
Static IP address
210.110.7.1
ZyWALL
Phase 1
Phase2
ZyWALL USG 2000 Support Notes
Static IP address
167.35.4.3
Internet
Branch Gateway
FortiGate 200A
LAN: 192.168.2.0/24
Negotiation Mode : Main
Pre-share key: 123456789
Authentication :MD5
Encapsulation: Tunnel
Active Protocol: ESP
Authentication: SHA1
Perfect Forward Secrecy (PFS): None
LAN: 192.168.2.X
FortiGate
WAN: 167.35.4.3
Phase 1
Encryption :DES
Key Group :DH1
Phase2
Encryption: DES
24