ZyXEL Communications ZyWall 110 User Manual page 609

Application Scenarios
The Zyxel Device's application scenarios make it easier to configure your VPN connection settings.
Table 219 IPSec VPN Application Scenarios
SITE-TO-SITE WITH
SITE-TO-SITE
DYNAMIC PEER
Choose this if the Choose this if the
remote IPSec router remote IPSec router has
has a static IP address a dynamic IP address.
or a domain name.
You don't specify the
This Zyxel Device can remote IPSec router's
initiate the VPN address, but you specify
tunnel. the remote policy (the
addresses of the devices
The remote IPSec
behind the remote
router can also initiate
IPSec router).
the VPN tunnel if this
Zyxel Device has a This Zyxel Device must
static IP address or a have a static IP address
domain name. or a domain name.
Only the remote IPSec
router can initiate the
VPN tunnel.
Finding Out More
• See Section 30.6 on page 631
• See the help in the IPSec VPN quick setup wizard screens.
Chapter 30 IPSec VPN
REMOTE ACCESS
(SERVER ROLE)
Choose this to allow
incoming connections
from IPSec VPN clients.
The clients have
dynamic IP addresses
and are also known as
dial-in users.
You don't specify the
addresses of the client
IPSec routers or the
remote policy.
This creates a dynamic
IPSec VPN rule that can
let multiple clients
connect.
Only the clients can
initiate the VPN tunnel.
for IPSec VPN background information.
ZyWALL USG Series User's Guide
609
REMOTE ACCESS VPN TUNNEL
(CLIENT ROLE) INTERFACE
Choose this to Choose this to
connect to an set up a VPN
IPSec server. tunnel
interface to
This Zyxel Device is
bind with a
the client (dial-in
VPN
user).
connection.
The Zyxel
Client role Zyxel
Device can
Devices initiate
use the
IPSec VPN
interface to do
connections to a
load
server role Zyxel
balancing
Device.
using a specific
Trunk. The
This Zyxel Device
remote IPSec
can have a
router should
dynamic IP
have a static IP
address.
address or a
The IPSec server
domain name.
doesn't configure
this Zyxel Device's
IP address or the
addresses of the
devices behind it.
Only this Zyxel
Device can initiate
the VPN tunnel.