Redirect ESP traffic to host behind ZyWALL USG 100

sambill
sambill Posts: 2  Freshman Member
edited April 2021 in Security
Hello,
I have a host behind ZyWALL USG 100 on which I have to redirect ESP protocol also port 4500 and 500, this host will act as a end-point VPN IPsec site2site, based on the constraint, we dont want to setup this VPN directly on ZyWALL USG 100 but on this host behind ZyWALL USG 100.

I have already redirect 4500 and 500 ports from external to that host, but I don't see how to redirect ESP protocol that is not a TCP or UDP protocol with port numuber.

Thanks for your help and ideas

#Biz_Security_Jan_2019

All Replies

  • Blabababa
    Blabababa Posts: 151  Master Member
    5 Answers First Comment Friend Collector Sixth Anniversary
    You can use policy route to forward ESP packets for specific hosts
  • sambill
    sambill Posts: 2  Freshman Member
    Thank you for your reply, can you point me how to do that ?

    thanks