ZyXEL Communications ZYWALL USG 2000 Support Notes page 35

11) In Security Level settings, choose the option User Defined and choose nopfs-esp-des-sha
rule on Phase 2 Proposal. The nopfs-esp-des-sha means no PFS, ESP Protocol,
Encryption Algorithm to DES and Authentication Algorithm to SHA1. Check the VPN
Monitor check box so that you can monitor your VPN tunnels. Then, press Return button
and OK button on next page to save the settings.
12) After applying the settings, the VPN IKE page will show the new IPSec rule.
13) Switch to Policies to set up policy rules for VPN traffic. In the field From choose Trust
and in the field To choose Untrust (it means from LAN to WAN). Then press the New
button to edit the policy rules.
All contents copyright (c) 2008 ZyXEL Communications Corporation.
ZyWALL USG 2000 Support Notes
11
12
35