How to configure site to site VPN between ZLD and uOS using route-based?

Zyxel_Kevin
Zyxel_Kevin Posts: 885  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
edited November 13 in VPN

This example shows how to use the VPN Setup Wizard to create a site-to-site VPN with the Peer gateway is ZLD device using route-based VPN.

The example instructs how to configure the VPN tunnel between each site. When the VPN tunnel is configured, each site can be accessed securely.

topology.png

Set up IPSec VPN Tunnel for uOS

VPN > IPSec VPN > Site to Site VPN > Configuration > Add to access configuration page

VPN > IPSec VPN > Site to Site VPN > Scenario

In the scenario step, type the VPN name used to identify this VPN connection. Select the type to the Site-to-Site. Click Next.

image.png

VPN > IPSec VPN > Site to Site VPN > Scenario > Network

image.png

Configure My Address and Peer Gateway Address. Click Next.

VPN > IPSec VPN > Site to Site VPN > Scenario > Network > Authentication

Type a secure Pre-Shared Key. Click Next

image.png

VPN > IPSec VPN > Site to Site VPN > Scenario > Network > Authentication > Policy & Routing

Set "Route-Based" Type and define the Remote Subnet. And change the VTI address as you want.

image.png

VPN > IPSec VPN > Site to Site VPN > Scenario > Network > Authentication > Policy & Routing > Summary

The screen provides a summary of the VPN tunnel. You can Edit it if you want to modify.

image.png

Network > Routing > Static Route

The routing will be added automatically

image.png

Set up IPSec VPN Tunnel for ZLD

VPN > IPSec VPN > VPN Gateway

Select the WAN interface and type the Peer Gateway Address.

6.png

Type Pre-shared Key. The default proposal which created by wizard is
“Encryption:AES128, Authentication:SHA1, Key Group:DH2”. Those are the same as uOS.

7.png

VPN > IPSec VPN > VPN Connection

Select VPN Gateway as "VPN Tunnel Interface" and select the correct phase1 profile

image.png

The default proposal which created by wizard is
“Encryption:AES128, Authentication:SHA1, Key Group:DH2”. Those are the same as uOS.

Network > Interface > VTI

Create VTI interface and assign vpn-rule of route based

image.png

Network > Routing > Static Route

Adding static route of peer subnet

image.png

Test IPSec VPN Tunnel

Go to VPN Status > IPSec VPN

Verify the IPSec VPN status

image.png

PC to Brance Office > Win 11 > cmd > ping 192.168.2.34

11.png

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）