6. Make sure the ZyWALL/USG units’ security policies allow IPSec VPN traffic. IKE uses
UDP port 500, AH uses IP protocol 51, and ESP uses IP protocol 50.
7. Verify that the Zone is set correctly in the VPN Connection rule. This should be set to
IPSec_VPN Zone so that security policies are applied properly.
How to Configure 2 factor for VPN connection?
This example shows how to use two-factor authentication to have double-layer
security to access a secured network behind the Zyxel Device via a VPN tunnel
between a ZyWALL/USG and a ZyWALL IPSec VPN Client. The first layer is the VPN
client user name / password and the second layer is an authorized SMS (via mobile
phone number) or email address.
Walkthrough
1. Set up the ZyWALL/USG IPSec VPN Tunnel on USG
2. Set up the ZyWALL IPSec VPN Client on windows client.
3. Set up notification for email and SMS message sending.
4. Enable 2 factor authentications for VPN service.