ZyXEL Communications ZyWall ATP series - What Can Go Wrong

397/782
www.zyxel.com
Check the VPN status of the USG2 in the MONITOR > VPN Monitor > IPSec screen.
PC of USG2 (192.168.11.33) > Window 7 > cmd > ping 192.168.1.34
What Can Go Wrong?
1 If you see below [info] or [error] log message, please check ZyWALL/USG
Phase 1 Settings. Both ZyWALL/USG at the HQ and Branch sites must use
the same Pre-Shared Key, Encryption, Authentication method, DH key
group and ID Type to establish the IKE SA.
MONITOR > Log
2 If you see that Phase 1 IKE SA process done but still get below [info] log
message, please check ZyWALL/USG Phase 2 Settings. Both ZyWALL/USG
at the HQ and Branch sites must use the same Protocol, Encapsulation,
Encryption, Authentication method and PFS to establish the IKE SA.