ZyXEL Communications 2WE 27.16.2Telecommuters Using Unique VPN Rules Example, Figure 27-10Telecommuters Sharing One VPN Rule Example

ZyWALL 2 and ZyWALL 2WE

Figure 27-10 Telecommuters Sharing One VPN Rule Example

27.16.2Telecommuters Using Unique VPN Rules Example

With aggressive negotiation mode (see section 27.10.1), the ZyWALL can use the ID types and contents to distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a ZyWALL at headquarters. They can use different IPSec parameters (including the pre-shared key) and the local IP addresses (or ranges of addresses) can overlap.

See the following graphic for an example where three telecommuters each use a different VPN rule to initiate a VPN connection to a ZyWALL located at headquarters. The ZyWALL at headquarters identifies each by its ID type and contents and uses the appropriate VPN rule to establish the VPN connection.

27-28 VPN/IPSec Setup