TECHNICAL TIPS
 
     
 
 
 

 

 
 
 
[24 July 2008]

Setting up VPN between 2 Zyxel zywall routers

Example…
LAN A needs to connect to LAN B which is on two different networks…

LAN A settings…
Router A (WAN) – 196.1.1.1
Router A (LAN) – 10.0.0.254
Network range – 10.0.0.0

LAN B settings…
Router B (WAN) – 204.1.1.1
Router B (LAN) – 192.168.1.254
Network range – 192.168.1.0

On router A you would need to setup the following VPN…

On the Zywall device, navigate to Security and then VPN.

1. Configure a VPN Rule

As in the picture above, click on the ICON to create a VPN Rule…
The following page will open up.

Configure the fields as circled in red above…

In our example, we would configure it as follows…

Name:  Network A

-
My Address: 196.1.1.1 (WAN IP Adress of Router A)
-
Primary Remote Gateway: 204.1.1.1 which is the IP Address of the WAN on router B
-
Pre-Shared Key: 12345678 (for testing purposes – you can change this later)
-
Local ID Type (IP) – 196.1.1.1 (this is used to authenticate Router A on Router B)
-
Peer ID Type (IP) – 204.1.1.1 (this is used to authenticate Router B on Router A)
   
On Router B
The settings will be as follows…

Name:  Network B
-

My Address: 204.1.1.1 (WAN IP Adress of Router B)

-

Primary Remote Gateway: 196.1.1.1 which is the IP Address of the WAN on router A

-

Pre-Shared Key: 12345678 (for testing purposes – you can change this later)

-
Local ID Type (IP) –204.1.1.1 (this is used to authenticate Router B on Router A)
-
Peer ID Type (IP) –196.1.1.1 (this is used to authenticate Router A on Router B)
 
The rest of the settings should be the same…

Once this is done click accept.

As in the circle below click on the ICON to setup the VPN Policy.

 

Configure the settings as listed above on Router A

Name:
Network A Connection
Gateway Policy:
Network A
Local Address Type:
Subnet
Start IP:
10.0.0.0
Subnet Mask:
255.255.255.0
Remote Address Type:
192.168.1.0
Remote Subnet:
255.255.255.0
On Router B
Name:
Network A Connection
Gateway Policy:
Network B
Local Address Type:
Subnet
Start IP:
192.168.1.0
Subnet Mask:
255.255.255.0
Remote Address Type:
10.0.0.0
Remote Subnet:
255.255.255.0
The rest of the settings are the same.