ZyXEL Communications P-661HW-D Series Support Note page 109

Be very careful about the remote IP address in branch office B, because
systems behind branch office B want to access systems behind branch office
A and headquarter, we have to specify these two segments in Remote section.
However if we include these two segments in one rule, the LAN segment of
branch office B will be also included in this single rule, which means
intercommunication inside branch office B will run into VPN tunnel. To avoid
such situation, we need two separate rules to cover the LAN segment of
branch office A and headquarter.
• The first rule in Branch_ B, Branch_B_1.
This rule is for branch office B to access headquarter.
(1) Local Address Type is Range Address and IP Address Start is
192.168.2.0, IP Address End is 192.168.2.255. This section covers the LAN
segment of branch office B.
Remote Address Type is Range Address and IP Address Start is
192.168.1.0, IP Address End is 192.168.1.255. This section covers the LAN
segment of headquarter office.
(2) My IP Address is the WAN IP of Prestige in Branch_B, 202.2.1.1 in the
example.
Secure Gateway Address is IP address of Headquarter, 202.1.1.1 in the
example.
(3) Suppose the pre-shared key is 01234567, we should configure the same
key in the corresponding rule in Headquarter VPN Gateway.
(4) You can setup IKE phase 1 and phase 2 parameters by pressing
Advanced button. Please make sure that parameters you set in this menu
match with all the parameters with the corresponding VPN rule in headquarter.
We don't make any advanced setup in the example.
• The second rule in Branch_B, Branch_B_2.
This rule is for branch office B to access branch office A.
(1) Local Address Type is Range Address and IP Address Start is
192.168.2.0, IP Address End is 192.168.2.255. This section covers the LAN
segment of branch office B.
Remote Address Type is Range Address and IP Address Start is
192.168.3.0, IP Address End is 192.168.3.255. This section covers the LAN
segment of branch office A.
All contents copyright © 2006 ZyXEL Communications Corporation.
P-661HW-D Series Support Notes
108