ZyXEL Communications ZYWALL 1050 Support Notes page 113

Main Office
Private network
EIP Workflow
Mail
ZyWALL 1050
ZyWALL 1050
LDAP Server
The network topology below is used to illustrate this application. We used ZyWALL70 as
branch office gateway which is connected to the main office's ZyWALL1050 A. All the
outgoing traffic from the branch office including the internet traffic and the remote subnet
traffic will be send to the VPN tunnel and handled by ZyWALL1050 A. ZyWALL1050 uses
WAN1 to establish VPN connection with ZyWALL70 in remote office and WAN2 as an uplink
to the ZyWALL1050 B which is the internet connection gateway of main office. Thus,
ZyWALL1050 A will route the traffic from the VPN tunnel and send it to the appropriate place
of the packet destination.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL 1050/ZyWALL USG 300 Support Notes
Intranet access may carry
confidential information and the
traffic should be transmitted via a
secure VPN tunnel
If the traffic is designated to the
Internet, ZyWALL 1050 can route
the traffic to its destination on the
Internet
IPSec VPN Tunnel
Internet access
Intranet access
Branch Office
Private network
ZyWALL 70
Employee
All outgoing traffic
originated from Branch
Office is routed to the Main
Office – centralized access
113