ZyWALL 10~100 Series Internet Security Gateway
Figure 15-10 Telecommuters Sharing One VPN Rule Example
15.17.2
Telecommuters Using Unique VPN Rules Example
With aggressive negotiation mode (see section 15.11.1), the ZyWALL can use the ID types and contents to
distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a
ZyWALL at headquarters. They can use different IPSec parameters (including the pre-shared key) and the
local IP addresses (or ranges of addresses) can overlap.
See the following graphic for an example where three telecommuters each use a different VPN rule to initiate
a VPN connection to a ZyWALL located at headquarters. The ZyWALL at headquarters identifies each by its
ID type and contents and uses the appropriate VPN rule to establish the VPN connection.
VPN Screens
15-29