ZyXEL Communications ZYWALL USG 1000 Support Notes page 94

ZyWALL USG 1000 Support Notes
policy route to the VPN tunnel.
Now after the VPN concentrator setup, all the remote VPN tunnels have been linked to the HQ
concentrator and remote sites can reach other remote sites via HQ.
The VPN concentrator is designed to route the remote sites' VPN traffic. However, user still
needs to setup the policy route for local subnet VPN traffic. For example, if we setup the VPN
concentrator only for HQ and remote sites A & B, then the A subnet can connect to B subnet
but HQ subnet can't connect to neither A nor B subnet.
Thus, this depends on how customers want to deploy their Global VPN network.
We can add the following policy route to allow the HQ subnet to connect with all the
concentrator's remote subnets.
94
All contents copyright (c) 2007 ZyXEL Communications Corporation.