ZyXEL Communications ZYWALL USG 2000 Support Notes page 29

can pass through the VPN tunnel at any time. Select "ACCEPT" as an action this time
because the traffic sent from wan to internal must be decrypted first and only then can be
transmitted. Don't select the IPSec as the Action in this VPN traffic flow direction.
13) The overall firewall policy is shown on the following figure. The VPN tunnel between
ZyWALL and FortiGate has been successfully setup.
Tips for application:
1. Make sure the Pre-Shared Key is the same in both local and remote gateways.
2. Make sure both IKE and IPSec proposal are the same in both local and remote gateways.
3. Make sure the VPN policy route has been configured in ZyWALL USG 2000.
4. Make sure the Firewall rule has been configured in FortiGate.
All contents copyright (c) 2008 ZyXEL Communications Corporation.
ZyWALL USG 2000 Support Notes
12
13
29