How To Use Dual-Wan To Perform Fail-Over On Vpn Using The Vpn Concentrator - ZyXEL Communications ZyWALL ATP Series Handbook

How to Use Dual-WAN to Perform Fail-Over on VPN Using the
VPN Concentrator
This is an example of using Dual-WAN to perform fail-over on a hub-and-spoke
VPN with the HQ ZyWALL/USG as the hub and spoke VPNs to Branches A and B.
When the VPN tunnel is configured, traffic passes between branches via the hub
(HQ). Traffic can also pass between spoke-and-spoke through the hub. If the
primary WAN interface is unavailable, the backup WAN interface will be used.
When the primary WAN interface is available again, traffic will use that interface
again.
Hub & Spoken VPN Using the VPN Concentrator with Backup
WAN
Note: All network IP addresses and subnet masks are used as examples in this article.
Please replace them with your actual network IP addresses and subnet masks. This example
was tested using USG310 (Firmware Version: ZLD 4.25).
www.zyxel.com
142/782