ZyWALL 2 Series User’s Guide
14.7.2 X-Auth (Extended Authentication)
Extended authentication provides added security by allowing you to use usernames and passwords for VPN connections. This is especially helpful when multiple ZyWALLs use one VPN rule to connect to a single ZyWALL. An attacker cannot make a VPN connection without a valid username and password.
The extended authentication server checks the user names and passwords of the extended authentication clients before completing the IPSec connection (see also the Authentication Server section).
A ZyWALL can be an extended authentication server for some VPN connections and an extended authentication client for other VPN connections.
14.7.3 Remote DNS Server
In cases where you want to use domain names to access Intranet servers on a remote network that has a DNS server, you must identify that DNS server. You cannot use DNS servers on the LAN or from the ISP since these DNS servers cannot resolve domain names to private IP addresses on the remote network
The following figure depicts an example where three VPN tunnels are created from ZyWALL A; one to branch office 2, one to branch office 3 and another to headquarters. In order to access computers that use private domain names on the headquarters (HQ) network, the ZyWALL at branch office 1 uses the Intranet DNS server in headquarters. The DNS server feature for VPN does not work with Windows 2000 or Windows XP
FigureVPN Screens |