Hub-And-Spoke Vpn; Figure 188 Vpn For Remote Management Example; Figure 189 Vpn Topologies - ZyXEL Communications ZyWall 5 Series User Manual

In the following example, the VPN rule's local network (A) includes the ZyWALL's LAN IP
address of 192.168.1.7. Someone in the remote network (B) can use a service (like HTTP for
example) through the VPN tunnel to access the ZyWALL's LAN interface. Remote
management must also be configured to allow HTTP access on the ZyWALL's LAN interface.

Figure 188 VPN for Remote Management Example

18.16 Hub-and-spoke VPN

Hub-and-spoke VPN connects VPN tunnels to form one secure network.
Figure 189 on page 359
approach, there is a VPN connection between every pair of routers. In the second (hub-and-
spoke) approach, there is a VPN connection between each spoke router (B, C, D, and E) and
the hub router (A). The hub router routes VPN traffic between the spoke routers and itself.

Figure 189 VPN Topologies

Hub-and-spoke VPN reduces the number of VPN connections that you have to set up and
maintain in the network. Small office or telecommuter IPSec routers that support a limited
number of VPN tunnels are also able to use VPN to connect to more networks. Hub-and-spoke
VPN makes it easier for the hub router to manage the traffic between the spoke routers. If you
have the spoke routers access the Internet through the hub-and-spoke VPN tunnel, the hub
router can also provide content filtering, IDP, anti-spam and anti-virus protection for the spoke
routers.
Chapter 18 IPSec VPN
shows some example network topologies. In the first (fully-meshed)
ZyWALL 5/35/70 Series User's Guide
359