Before You Begin - ZyXEL Communications ZyWall USG20-VPN User Manual

Application Scenarios
The USG's application scenarios make it easier to configure your VPN connection settings.
Table 133 IPSec VPN Application Scenarios
SITE-TO-SITE
Choose this if the remote
IPSec router has a static
IP address or a domain
name.
This USG can initiate the
VPN tunnel.
The remote IPSec router
can also initiate the VPN
tunnel if this USG has a
static IP address or a
domain name.
Finding Out More
• See Section 21.6 on page 358
• See the help in the IPSec VPN quick setup wizard screens.

21.1.3 Before You Begin

This section briefly explains the relationship between VPN tunnels and other features. It also gives
some basic suggestions for troubleshooting.
You should set up the following features before you set up the VPN tunnel.
Chapter 21 IPSec VPN
SITE-TO-SITE WITH
DYNAMIC PEER
Choose this if the remote
IPSec router has a
dynamic IP address.
You don't specify the
remote IPSec router's
address, but you specify
the remote policy (the
addresses of the devices
behind the remote IPSec
router).
This USG must have a
static IP address or a
domain name.
Only the remote IPSec
router can initiate the
VPN tunnel.
for IPSec VPN background information.
USG20(W)-VPN Series User's Guide
337
REMOTE ACCESS
(SERVER ROLE)
Choose this to allow
incoming connections
from IPSec VPN clients.
The clients have dynamic
IP addresses and are also
known as dial-in users.
You don't specify the
addresses of the client
IPSec routers or the
remote policy.
This creates a dynamic
IPSec VPN rule that can
let multiple clients
connect.
Only the clients can
initiate the VPN tunnel.
REMOTE ACCESS
(CLIENT ROLE)
Choose this to connect to
an IPSec server.
This USG is the client
(dial-in user).
Client role USGs initiate
IPSec VPN connections to
a server role USG.
This USG can have a
dynamic IP address.
The IPSec server doesn't
configure this USG's IP
address or the addresses
of the devices behind it.
Only this USG can initiate
the VPN tunnel.