ZyXEL Communications ZyWALL USG FLEX 100 - Page 179

179/782
www.zyxel.com
Configure Phase 1 Proposal and Diffie-Hellman Group as the peer ZyWALL/USG
Advanced Settings’ Phase 1 Settings > Proposal and Key Group.
VPN > IPsec > Wizard > Custom VPN Tunnel (No Template) > Phase 1 Proposal
Go to Phase 2 Selectors > Advanced and configure Phase 2 Proposal as the peer
ZyWALL/USG Advanced Settings’ Phase 2 Settings > Proposal.
Set Local Address to be the IP address range of the network connected to the
FortiGate and Remote Address to be the IP address range of the network
connected to the ZyWALL/USG.
Make sure you uncheck Enable Perfect Forward Secrecy (PFS) if this function is
disabled in the peer ZyWALL/USG.
VPN > IPsec > Wizard > Custom VPN Tunnel (No Template) > Phase 2 Selectors