Table Of Contents - ZyXEL Communications ZYWALL USG 2000 Support Notes

INDEX
The comparison of ZyNOS and ZLD ............................................................................................. 8
1. Deploying VPN .......................................................................................................................... 9
1.1 Extended Intranets .......................................................................................................... 11
1.1.2 Site to Site VPN solutions (ZyWALL 1050
1.2 Extranet Deployment ..................................................................................................... 18
1.2.1 Site to site VPN solutions (ZyWALL USG 2000 to ZyWALL70) ...................... 19
1.2.2 Interoperability - VPN with other vendors ......................................................... 23
1.2.2.1 ZyWALL with FortiGate VPN Tunneling ................................................ 23
1.2.2.2 ZyWALL with NetScreen VPN Tunneling .............................................. 30
1.2.2.3 ZyWALL with SonicWall VPN Tunneling ............................................... 38
1.3 Remote Access VPN ...................................................................................................... 45
1.3.1 IPSec VPN for Remote Access ........................................................................... 45
1.3.1.1 Steps to configure ..................................................................................... 47
1.3.2 SSL VPN Application - Reverse Proxy ............................................................... 52
1.3.2.1 Scenario topology ..................................................................................... 52
1.3.2.2 Configuration flow ................................................................................... 52
1.3.2.3 Configuration procedure .......................................................................... 52
1.3.3 SSL VPN Application - Network Extension ...................................................... 55
1.3.3.1 Scenario topology ..................................................................................... 55
1.3.3.2 Configuration flow ................................................................................... 55
1.3.3.3 Configuration procedure .......................................................................... 56
1.3.4 L2TP over IPSec Application .............................................................................. 62
1.3.4.1 Scenario topology ..................................................................................... 62
1.3.4.2 Configuration flow ................................................................................... 62
1.3.4.3 Configuration Procedure .......................................................................... 62
1.4 Large-scale VPN Deployment ....................................................................................... 73
1.4.1 Fully Meshed Topology ................................................................................... 73
1.4.2 Star Topology ................................................................................................... 74
1.4.3 Star-Mesh Mixed Topology .............................................................................. 83
1.5 Device HA ...................................................................................................................... 99
1.5.1 Device HA ......................................................................................................... 101
1.5.1.1 Configuration procedure ........................................................................ 101
1.5.2 Device High Availability (HA) Active-Passive mode ....................................... 113
1.5.2.1 Scenario Topology ................................................................................. 113
All contents copyright (c) 2008 ZyXEL Communications Corporation.
ZyWALL USG 2000 Support Notes
ZyWALL USG 2000): .............. 11
2