Zyxel ZyWALL USG 20W — vPN Routing Automation: Simplified Configuration for Secure Branch Networks [103/185]

Превью страниц Страница 103 / 185

ZyWALL USG Support Notes

103

In ZLD v2.20, routing for VPN traffic is automatically created according the VPN

phase2 local and remote policy. So we don‟t need to add any policy routes for the

traffic from HQ local subnet to the branch office subnets.

On Br1

Step1. Go to Monitor > System Status > Interface Status, check the interface IP

information for later use in IPSec VPN configuration.

Step2. Go to Configuration > Object > Address, add HQ local subnet address object

for later IPSec VPN configuration use. And a range address object for later use in

Policy Route configuration to route traffic to all other branch offices‟ local networks

to VPN tunnels. This range object should cover all the branch offices‟ local subnets.

In this case we create it as 192.168.1.0~192.168.5.255.