ZyXEL Communications USG40 User Manual page 538

Application Scenarios
The ZyWALL/USG's application scenarios make it easier to configure your VPN connection settings.
Table 207 IPSec VPN Application Scenarios
SITE-TO-SITE WITH
SITE-TO-SITE
DYNAMIC PEER
Choose this if the Choose this if the
remote IPSec router remote IPSec router
has a static IP has a dynamic IP
address or a domain address.
name.
You don't specify the
This ZyWALL/USG remote IPSec router's
can initiate the VPN address, but you
tunnel. specify the remote
policy (the addresses of
The remote IPSec
the devices behind the
router can also
remote IPSec router).
initiate the VPN
tunnel if this This ZyWALL/USG must
ZyWALL/USG has a have a static IP address
static IP address or a or a domain name.
domain name.
Only the remote IPSec
router can initiate the
VPN tunnel.
Finding Out More
• See Section 29.6 on page 560
Chapter 29 IPSec VPN
REMOTE ACCESS
(SERVER ROLE)
Choose this to allow
incoming connections
from IPSec VPN
clients.
The clients have
dynamic IP addresses
and are also known as
dial-in users.
You don't specify the
addresses of the client
IPSec routers or the
remote policy.
This creates a dynamic
IPSec VPN rule that
can let multiple clients
connect.
Only the clients can
initiate the VPN tunnel.
for IPSec VPN background information.
ZyWALL/USG Series User's Guide
538
REMOTE
VPN TUNNEL
ACCESS (CLIENT
INTERFACE
ROLE)
Choose this to Choose this to
connect to an set up a VPN
IPSec server. tunnel
interface to
This ZyWALL/USG
bind with a
is the client (dial-
VPN
in user).
connection.
The ZyWALL/
Client role
USG can use
ZyWALL/USGs
the interface
initiate IPSec VPN
to do load
connections to a
balancing
server role
using a
ZyWALL/USG.
specific Trunk.
The remote
This ZyWALL/USG
IPsec router
can have a
should have a
dynamic IP
static IP
address.
address or a
The IPSec server
domain name.
doesn't configure
this ZyWALL/
USG's IP address
or the addresses
of the devices
behind it.
Only this ZyWALL/
USG can initiate
the VPN tunnel.