ZyXEL Communications ZyWall - Page 16

16/26
www.zyxel.com
Site-to-Site VPN will not establish
If you have configured an IPSec VPN rule for site-to-site (router-to-router)
connection and the tunnel is not being established, please try the
following:
 Reboot/Restart the ZyWALL appliance to reload the VPN
daemon.
 Check the ZyWALL logs to verify that IKE connection attempts are
being sent and received. If the logs show one way IKE traffic,
send only for example, check the internet connection to make
sure traffic is not being blocked/stopped on the service end.
 Double check the VPN rules on both ends to make sure all
settings are matching.
 If using DDNS hostname or domain name to dial the connection
instead of the public IP address, please make sure there are DNS
servers programmed on the ZyWALL and that they can resolve
the DDNS hostname/domain name. To check if the ZyWALL can
resolve the name you will need to open a terminal session using
SSH/Telnet/Console and run a ping command to the DDNS
hostname/domain name.
Router> ping hostname/domain (ex: Router> ping
www.google.com)
If the ping test fails double check the ZyWALL’s DNS settings and
try again. If your internet service is DHCP the ZyWALL would
have automatically obtained the DNS server settings from your ISP.
To check this go to Configuration  System  DNS.