ZyXEL Communications ZyWALL 110 Handbook page 3

(Branch has a Dynamic IP Address) ..................................................... 77
Test the IPSec VPN Tunnel ....................................................................... 81
What Could Go Wrong? ........................................................................ 82
How to Configure IPSec Site to Site VPN while one Site is behind a NAT
router ............................................................................................................ 84
Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network
(HQ) ........................................................................................................... 84
Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network
(Branch) .................................................................................................... 88
Set Up the NAT Router (Using ZyWALL USG device in this example) 91
Test the IPSec VPN Tunnel ....................................................................... 93
What Could Go Wrong? ........................................................................ 94
How to Configure Hub-and-Spoke IPSec VPN ......................................... 96
Set Up the IPSec VPN Tunnel on the ZyWALL/USG by Using VPN
Concentrator Hub_HQ-to-Branch_A.................................................... 97
Hub_HQ-to-Branch_B ............................................................................ 101
Hub_HQ Concentrator ......................................................................... 104
Spoke_Branch_A ................................................................................... 106
Spoke_Branch_B .................................................................................... 111
Test the IPSec VPN Tunnel ..................................................................... 115
What Could Go Wrong? ...................................................................... 118
Set Up the IPSec VPN Tunnel of ZyWALL/USG without Using VPN
Concentrator Hub_HQ-to-Branch_A.................................................. 119
Hub_HQ-to-Branch_B ............................................................................ 122
Spoke_Branch_A ................................................................................... 125
Spoke_Branch_B .................................................................................... 128
Test the IPSec VPN Tunnel ..................................................................... 131
What Could Go Wrong? ...................................................................... 133
How to Use Dual-WAN to Perform Fail-Over on VPN Using the VPN
Concentrator ............................................................................................. 135
Set Up the IPSec VPN Tunnel on the ZyWALL/USG
Hub_HQ-to-Branch_A ........................................................................... 136
Hub_HQ-to-Branch_B ............................................................................ 139
Hub_HQ Concentrator ......................................................................... 142
www.zyxel.com
3/749