Remote Access Vpn; Ipsec Vpn For Remote Access - ZyXEL Communications ZYWALL USG 2000 Support Notes

ZyWALL USG 2000 Support Notes

1.3 Remote Access VPN

Remote Access VPN provides a cost-effective alternative to standard dial-in remote access to a
company network. The users can connect to the network via the Internet, eliminating the
expensive long-distance or the toll-free dial-in costs.
The most common scenario for application might look like this: An employee is on the road
(i.e. teleworker). He can gain full network access simply by connecting to the Internet. During
the data transmission between remote and host, this connection should also provide
confidentiality (Data transferring in VPN tunnel with encryption).
Another genius application is a "Mobile office": Teleworker or home & SOHO employee can
work at airport, cyber café, hot spots, hotel or home. The office building scope can be
eliminated and a global office can start to fully utilize the global resources.
ZyWALL USG 2000 incorporates IPSec, SSL VPN and L2TP over IPSec into a single box.
The customers can choose the most appropriate application for the remote access application.

1.3.1 IPSec VPN for Remote Access

In this scenario, we assume the ZyWALL USG 2000 admin configured the VPN settings in a
way to allow teleworker access internal network resource through remote access VPN. Since it
is unknown what IP address will the remote teleworker's PC/notebook connect from, 0.0.0.0 is
used as for ZyWALL USG 2000's remote gateway setting it represents "any IPs". On the other
end, the teleworker use ZyWALL VPN client on their notebooks to establish IPSec VPN with
the main office.
45
All contents copyright (c) 2008 ZyXEL Communications Corporation.