ZyXEL Communications P-334W 16.17.2Telecommuters Using Unique VPN Rules Example, Figure 16-11Telecommuters Sharing One VPN Rule Example

Prestige 334W User’s Guide

Figure 16-11 Telecommuters Sharing One VPN Rule Example

16.17.2Telecommuters Using Unique VPN Rules Example

With aggressive negotiation mode (see section 16.11.1), the Prestige can use the ID types and contents to distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a Prestige at headquarters. They can use different IPSec parameters (including the pre-shared key) and the local IP addresses (or ranges of addresses) can overlap.

See the following graphic for an example where three telecommuters each use a different VPN rule to initiate a VPN connection to a Prestige located at headquarters. The Prestige at headquarters identifies each by its secure gateway address (a dynamic domain name) and uses the appropriate VPN rule to establish the VPN connection.

16-34 VPN Screens