Table Of Contents - ZyXEL Communications ZYWALL 1050 Support Notes

INDEX
1. Deploying VPN .......................................................................................................................... 8
1.1 Extended Intranets.......................................................................................................... 10
1.1.1 Site to Site VPN (ZyWALL 1050/USG 300
1.1.2 Site to Site VPN solutions (ZyWALL 1050
1.2 Extranet Deployment ..................................................................................................... 19
1.2.1 Site to site VPN solutions (ZyWALL1050/ZyWALL USG 300 to ZyWALL70)20
1.2.2 Interoperability - VPN with other vendors ...................................................... 26
1.2.2.1 ZyWALL with FortiGate VPN Tunneling............................................. 26
1.2.2.2 ZyWALL with NetScreen VPN Tunneling ........................................... 32
1.2.2.3 ZyWALL with SonicWall VPN Tunneling............................................ 41
1.3 Remote Access VPN ...................................................................................................... 50
1.3.1 IPSec VPN for Remote Access ........................................................................... 50
1.3.2 SSL VPN Application - Reverse Proxy............................................................ 59
1.3.3 Using Two-factor Authentication to Provide Stronger Password Security ...... 67
1.3.4 L2TP over IPSec Application........................................................................... 77
1.4 Large-scale VPN Deployment ....................................................................................... 85
1.4.1 Fully Meshed Topology ................................................................................... 86
1.4.2 Star Topology ................................................................................................... 87
1.4.3 Star-Mesh Mixed Topology.............................................................................. 96
1.5 Access via Central Site................................................................................................. 112
1.5.1 VPN Tunnel to Central Site (ZyWALL 70 to ZyWALL 1050/ZyWALL USG
300) ............................................................................................................................ 112
1.6 Multiple Entry Point (MEP)......................................................................................... 124
1.6.1 Deploying MEP.............................................................................................. 124
1.7 Device HA together with VPN HA.............................................................................. 163
1.7.1 Device HA...................................................................................................... 164
1.7.2 VPN HA ......................................................................................................... 182
1.8 VoIP over VPN ............................................................................................................ 189
2. Security Policy Enforcement.................................................................................................. 200
2.1 Managing IM/P2P Applications ................................................................................... 200
2.1.1 Why bother with managing IM/P2P applications?......................................... 200
2.1.2 What does ZyWALL 1050/ZyWALL USG 300 provide for managing IM/P2P
applications?............................................................................................................... 200
2.1.3 Configuration Example ..................................................................................... 201
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL 1050/ZyWALL USG 300 Support Notes
ZyWALL 1050/USG 300): ...... 10
ZyWALL USG 300): ................ 14
2