ZyXEL Communications USG210 - How to Configure Ipsec VPN Failover

255 pages

To Next Page

To Previous Page

84/255

www.zyxel.com

How to Configure IPSec VPN Failover

This example shows how to use the VPN Setup Wizard to create a site-to-site VPN

with failover. The example instructs how to configure the VPN tunnel between

each site if one site has multi-WAN. When the multi-WAN VPN failover is

configured, IPSec VPN tunnels automatically fail over to a backup WAN

interface if the primary WAN interface becomes unavailable.

Figure 134 ZyWALL Site-to-site IPSec VPN with multiple WAN failover

Note: All network IP addresses and subnet masks are used as examples in this

article. Please replace them with your actual network IP addresses and subnet

masks. This example was tested using USG110 (Firmware Version: ZLD 4.15).

Main Page

Default Chapter2
- Table of Contents2
How to Configure Site-To-Site Ipsec VPN with Amazon VPC8
- Set up the Ipsec VPN Tunnel on the Amazon VPC9
- Set up the Ipsec VPN Tunnel on the Zywall/Usg13
- Test the Ipsec VPN Tunnel17
- What Could Go Wrong18
How to Configure GRE over Ipsec VPN Tunnel20
- Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (HQ)21
- Set up the Zywall/Usg GRE over Ipsec VPN Tunnel of Corporate Network (Branch)25
- Test the GRE over Ipsec VPN Tunnel30
- What Could Go Wrong30
How to Configure Ipsec Site to Site VPN While One Site Is Behind a NAT Router32
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)33
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)36
- Set up the NAT Router (Using Zywall USG Device in this Example)40
- Test the Ipsec VPN Tunnel42
- What Could Go Wrong43
How to Configure L2TP over Ipsec VPN While the Zywall/Usg Is Behind a NAT Router45
- Set up the L2TP VPN Tunnel on the Zywall/Usg_Hq46
- Set up the NAT Router (Using Zywall USG Device in this Example)50
- Test the L2TP over Ipsec VPN Tunnel52
- What Could Go Wrong55
How to Configure if I Want User Can Only See SSL VPN Login Button in Web Portal Login Page57
- Set up the DNS Service58
- Set up the Zywall/Usg SSL VPN Setting58
- Set up the Zywall/Usg System Setting59
- Test the SSL VPN60
How to Configure an SSL VPN Tunnel (with Secuextender Version 4.0.0.1) on the Windows 10 Operating System64
- Set up the SSL VPN Tunnel with Windows 1064
- What Can Go Wrong68
How to Redirect Multiple LAN Interface Traffic to the VPN Tunnel70
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)71
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)74
- Set up the Policy Route (Zywall/Usg_Hq)77
- Set up the Policy Route (Zywall/Usg_Branch)79
- Test the Ipsec VPN Tunnel80
- What Could Go Wrong82
How to Configure Ipsec VPN Failover84
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (HQ)85
- Set up the Zywall/Usg Ipsec VPN Tunnel of Corporate Network (Branch)88
- Set up the WAN Trunk (Zywall/Usg_Hq)92
- Set up the Failover Command Line (Zywall/Usg HQ)93
- Test the Ipsec VPN Tunnel95
- What Could Go Wrong96
How to Create VTI and Configure VPN Failover with VTI98
- VTI Deployment Flow98
- Set up the Zywall/Usg VTI of Corporate Network (HQ)99
- Set up the Zywall/Usg VTI of Corporate Network (Branch)104
- Test the Ipsec VPN Tunnel111
- What Can Go Wrong113
How to Import Zywall/Usg Certificate for L2TP over Ipsec in Android Mobile Phone115
- Set up the L2TP VPN Tunnel on the Zywall/Usg116
- Export a Certificate from Zywall/Usg and Import It to Android120
- Mobile Phone120
- Set up the L2TP VPN Tunnel on the Android Mobile Device121
- Test the L2TP over Ipsec VPN Tunnel124
- What Could Go Wrong126
How to Import Zywall/Usg Certificate for L2TP over Ipsec in IOS Mobile Phone128
- Set up the L2TP VPN Tunnel on the Zywall/Usg129
- Export a Certificate from Zywall/Usg and Import It to Ios Mobile Phone133
- Set up the L2TP VPN Tunnel on the Ios Mobile Device134
- Test the L2TP over Ipsec VPN Tunnel137
- What Could Go Wrong138
How to Configure the USG When Using a Cloud Based SIP System140
- Set up the SIP ALG141
- Test Result142
- What Could Go Wrong142
How to Block HTTPS Websites by Domain Filter Without Applying SSL Inspection143
- Set up the Content Filter on the Zywall/Usg144
- Set up the Security Policy on the Zywall/Usg146
- Set up the System Policy on the Zywall/Usg146
- Test the Result147
How to Configure Content Filter 2.0 - Geo IP Blocking149
- Set up the Address Objet with Geo IP on the Zywall/Usg150
- Set up the Security Policy on the Zywall/Usg151
- Test the Result152
- What Could Go Wrong153
How to Block the Client Accessing to Certain Country Using Geo IP and Content Filter154
- Check Geo IP License Status on the Zywall/Usg155
- Set up the Address Objet with Geo IP on the Zywall/Usg155
- Set up the Security Policy on the Zywall/Usg156
- Test the Result158
How to Set up Link Aggregation Group (LAG)160
- Set up the Active-Backup, 802.3Ad, Balance-Alb160
- Set up the Active-Backup Mode164
- Test the Result166
- What Can Go Wrong166
How to Restrict Web Portal Access from the Internet167
- Set up the Zywall/Usg System Setting168
- Test the Web Access169
How to Setup and Configure Daily Report171
- Set up the Zywall/Usg Email Daily Report Setting172
- Test the Daily Log Report173
- What Could Go Wrong174
How to Setup and Configure Email Logs175
- Set up the Zywall/Usg Email Logs Setting176
- Test the Email Log178
- What Could Go Wrong178
How to Setup and Send Logs to a Syslog Server179
- Set up the Syslog Server (Use Papertrail Syslog in this Example)180
- Set up the Zywall/Usg Remote Server Setting182
- Test the Remote Server183
- What Could Go Wrong184
How to Setup and Send Logs to a Vantage Reports Server185
- Set up the VRPT Server186
- Set up the Zywall/Usg Remote Server Setting189
- Test the Remote Server189
- What Could Go Wrong190
How to Enable and Send Logs to the USB Storage191
- Set up the USB System Settings192
- Set up the USB Log Storage192
- Check the USG Log Files193
How to Create a Wi-Fi VLAN Interfaces to Separate Staff Network and Guest Network194
- Set up Wi-Fi VLAN Interfaces195
- Test Result202
- What Could Go Wrong203
How to Activate a Free Access Hotspot205
- Set up the Free Access Hotspot206
- Test the User Agreement and Advertisement Webpage208
- What Could Go Wrong209
- Set up Enable the Free Time Feature210
- Test Free Time Feature215
- What Can Go Wrong218
How to Enable Device HA Pro220
- Device HA Pro License221
- Behavior of the Device HA Pro222
- Suggestions224
- How Do I Configure Device HA Pro in My Current Environment224
- What Can Go Wrong229
How to Set up Ipv6 Interfaces for Pure Ipv6 Routing231
- Setting up the Ipv6 Interface232
- Set up the Prefix Delegation and Router Advertisement234
- Test238
- What Can Go Wrong238
- Test240
How to Perform and Use the Packet Capture Feature on the Zywall/Usg241
- Set up the Packet Capture Feature242
- Check the Capture Files244
How to Automatically Reboot the Zywall/Usg by Schedule246
- Set up the Shell Script247
- Set up the Schedule Run248
- Check the Reboot Status249
How to Continuously Run a Zysh Script251
- Set up the Shell Script252

ZyXEL Communications USG210 - How to Configure Ipsec VPN Failover

Table of Contents

Other manuals for ZyXEL Communications USG210

Related product manuals