ZyXEL Communications ZYWALL USG 1000 Support Notes page 113

Main Office
Private network
EIP Workflow
Mail
ZyWALL USG
ZyWALL USG
LDAP Server
The network topology below is used to illustrate this application. We used ZyWALL70 as
branch office gateway which is connected to the main office's ZyWALL USG A. All the
outgoing traffic from the branch office including the internet traffic and the remote subnet
traffic will be send to the VPN tunnel and handled by ZyWALL USG A. ZyWALL USG uses
WAN1 to establish VPN connection with ZyWALL70 in remote office and WAN2 as an uplink
to the ZyWALL USG B which is the internet connection gateway of main office. Thus,
ZyWALL USG A will route the traffic from the VPN tunnel and send it to the appropriate
place of the packet destination.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
Intranet access may carry
confidential information and the
traffic should be transmitted via a
secure VPN tunnel
If the traffic is designated to the
Internet, ZyWALL USG can route
the traffic to its destination on the
Internet
IPSec VPN Tunnel
Internet access
Intranet access
ZyWALL USG 1000 Support Notes
Branch Office
Private network
ZyWALL 70
All outgoing traffic
originated from Branch
Office is routed to the Main
Office – centralized access
Employee
113