ZyXEL Communications ZYWALL USG 1000 Support Notes page 189

application can help enterprise to reduce the operation cost especially saving on long distance
communication fee. The security issues also rise due to the VoIP public network transmission
character. The common VoIP Security issues like call hijacking, identity theft and denial of
service. Thus ZyWALL USG can protect the VoIP line security by employing advanced VPN
technology.
What's the benefit of using ZyWALL to protect converged network?
‧ Prevent from call hijacking (VoIP over VPN)
‧ Prevent from identity theft (VoIP over VPN)
‧ Mitigate impact of denial of service
We use a simple topology to illustrate and show how ZyWALL USG can protect the VoIP line
step by step in the following notes.
Main Office
P2002
IP: 192.168.10.37
SIP Number: 850
ZyWALL USG
WAN: 179.25.3.24
LAN: 192.168.10.0/24
We used two VoIP ATA (ZyXEL P2002 series) connected to office gateway. Each of the VoIP
ATA has a SIP number for remote ATA dialing. This kind of application is called Fix VoIP Line
application. User only needs to install and configure VoIP ATA device and doesn't need to
register with an external SIP server. We will use VPN tunnel for VoIP traffic transmission to
ensure the VoIP security.
VoIP ATA P2002 Configuration:
The default management IP for P2002 is 192.168.5.1. Login to the P2002 GUI and navigate to
the Ethernet menu. Set the Ethernet IP setting to "Get IP address Automatically".
All contents copyright (c) 2007 ZyXEL Communications Corporation.
Fix VoIP Line Application
VPN Tunnel
Internet
ZyWALL USG 1000 Support Notes
Branch Office
P2002
VPN Tunnel
WAN: 220.123.97.7
LAN: 192.168.22.0/24
IP: 192.168.22.35
SIP Number: 880
ZyWALL70
189