What You Can Do In This Chapter; What You Need To Know - ZyXEL Communications ZyWall ATP series User Manual

L2TP VPN
L2TP VPN uses the L2TP and IPSec client software included in remote users' Android, iOS, or Windows
operating systems for secure connections to the network behind the Zyxel Device. The remote users do
not need their own IPSec gateways or third-party VPN client software. For example, configure sales
representatives' laptops, tablets, or smartphones to securely connect to the Zyxel Device's network. See
Chapter 22 on page 421
Figure 268 L2TP VPN

20.1.1 What You Can Do in this Chapter

• Use the VPN Connection screens (see
an IPSec VPN connection policy uses, which devices behind the IPSec routers can use the VPN tunnel,
and the IPSec SA settings (phase 2 settings). You can also activate or deactivate and connect or
disconnect each VPN connection (each IPSec SA).
• Use the VPN Gateway screens (see
gateways. A VPN gateway specifies the IPSec routers at either end of a VPN tunnel and the IKE SA
settings (phase 1 settings). You can also activate and deactivate each VPN gateway.
• Use the VPN Concentrator screens (see
connections into a single secure network.
• Use the Configuration Provisioning screen (see
rule settings from the Zyxel Device using the Zyxel Device IPSec VPN Client.

20.1.2 What You Need to Know

An IPSec VPN tunnel is usually established in two phases. Each phase establishes a security association
(SA), a contract indicating what security parameters the Zyxel Device and the remote IPSec router will
use. The first phase establishes an Internet Key Exchange (IKE) SA between the Zyxel Device and remote
IPSec router. The second phase uses the IKE SA to securely establish an IPSec SA through which the Zyxel
Device and remote IPSec router can send data between computers on the local network and remote
network. This is illustrated in the following figure.
Chapter 20 IPSec VPN
for more on L2TP over IPSec.
Section 20.2 on page
Section 20.2.1 on page
Section 20.4 on page
Section 20.5 on page
ZyWALL ATP Series User's Guide
381
384) to specify which IPSec VPN gateway
386) to manage the Zyxel Device's VPN
401) to combine several IPSec VPN
403) to set who can retrieve VPN