ZyXEL Communications ZyWall ATP series - Page 227

227/782
www.zyxel.com
If you see that Phase 1 IKE SA process done but still get below [info] log message,
please check ZyWALL/USG and SonicWALL Phase 2 Settings. Both ZyWALL/USG
and SonicWALL must use the same Protocol, Encapsulation, Encryption,
Authentication method and PFS to establish the IKE SA.
MONITOR > Log
Make sure the both ZyWALL/USG and SonicWALL security policies allow IPSec
VPN traffic. IKE uses UDP port 500, AH uses IP protocol 51, and ESP uses IP protocol
50.
Default NAT traversal is enable on ZyWALL/USG, please make sure the remote
IPSec device must also have NAT traversal enabled.