ZyXEL Communications ZYWALL 35 User Manual page 394

Chapter 18 IPSec VPN
• The hub router must have at least one separate VPN rule for each spoke. In the local IP
address, specify the IP addresses of the hub-and-spoke networks with which the spoke is
to be able to have a VPN tunnel. This may require you to use more than one VPN rule.
• If you want to have the spoke routers access the Internet through the hub-and-spoke VPN
tunnel, set the VPN rules in the spoke routers to use 0.0.0.0 (any) as the remote IP address.
• Make sure that your From VPN and To VPN firewall rules do not block the VPN packets.
394
ZyWALL 5/35/70 Series User's Guide