ZyXEL Communications ZyWall USG 2000 User Manual page 472

Unified security gateway

Hide thumbs Also See for ZyWall USG 2000:

Table of Contents

Chapter 25 IPSec VPN

• Branch office A's ZyWALL uses one VPN rule to access both the headquarters

(HQ) network and branch office B's network.

• Branch office B's ZyWALL uses one VPN rule to access branch office A's network

only. Branch office B is not permitted to access the headquarters network.

Figure 336 IPSec VPN Concentrator Example

This IPSec VPN concentrator example uses the following settings.

Branch Office A (ZyNOS-based ZyWALL):

VPN Gateway (VPN Tunnel 1):

• My Address: 10.0.0.2

• Peer Gateway Address: 10.0.0.1

VPN Connection (VPN Tunnel 1):

• Local Policy:192.168.11.0/255.255.255.0

• Remote Policy: 192.168.1.0/255.255.255.0

• Disable Policy Enforcement

Policy Route

• Source: 192.168.11.0

• Destination: 192.168.12.0

• Next Hop: VPN Tunnel 1

Headquarters (USG ZyWALL or ZyWALL 1050):

VPN Gateway (VPN Tunnel 1):

• My Address: 10.0.0.1

• Peer Gateway Address: 10.0.0.2

ZyWALL USG 2000 User's Guide

Troubleshooting