Table 16-12 Telecommuter And Headquarters Configuration Example; Telecommuters Sharing One Vpn Rule Example; Telecommuter Vpn/Ipsec Examples - ZyXEL Communications P-334W User Manual

LABEL
Allow Through IP/Sec
Tunnel
Apply
Reset

16.17 Telecommuter VPN/IPSec Examples

The following examples show how multiple telecommuters can make VPN connections to a single Prestige
at headquarters from remote IPSec routers that use dynamic WAN IP addresses.
16.17.1

Telecommuters Sharing One VPN Rule Example

Multiple telecommuters can use one VPN rule to simultaneously access a Prestige at headquarters. They
must all use the same IPSec parameters (including the pre-shared key) but the local IP addresses (or ranges
of addresses) cannot overlap. See the following table and figure for an example.
Having everyone use the same pre-shared key may create a vulnerability. If the pre-shared key is
compromised, all of the VPN connections using that VPN rule are at risk. A recommended alternative is to
use a different VPN rule for each telecommuter and identify them by unique IDs (see section 16.17.2 for an
example).

Table 16-12 Telecommuter and Headquarters Configuration Example

My IP Address:
Secure Gateway
IP Address:
VPN Screens
Table 16-11 VPN: Global Setting
Select this check box to send NetBIOS packets through the VPN connection.
Click Apply to save your changes back to the Prestige.
Click Reset to begin configuring this screen afresh.
TELECOMMUTER
0.0.0.0 (dynamic IP address
assigned by the ISP)
Public static IP address or domain
name.
Prestige 334W User's Guide
DESCRIPTION
HEADQUARTERS
Public static IP address
0.0.0.0 With this IP address only the
telecommuter can initiate the IPSec tunnel.
16-33