ZyWALL 2 Series User’s Guide

See the following table and figure for an example where three telecommuters each use a different VPN rule for a VPN connection with a ZyWALL located at headquarters. The ZyWALL at headquarters (HQ in the figure) identifies each incoming SA by its ID type and content and uses the appropriate VPN rule to establish the VPN connection.

The ZyWALL at headquarters can also initiate VPN connections to the telecommuters since it can find the telecommuters by resolving their domain names.

Figure 14-14 Telecommuters Using Unique VPN Rules ExampleTable 14-13 Telecommuters Using Unique VPN Rules Example

TELECOMMUTERS

HEADQUARTERS

All Telecommuter Rules:

All Headquarters Rules:

 

 

My IP Address 0.0.0.0

My IP Address: bigcompanyhq.com

 

 

Secure Gateway Address: bigcompanyhq.com

Local IP Address: 192.168.1.10

 

 

Remote IP Address: 192.168.1.10

Local ID Type: E-mail

 

 

Peer ID Type: E-mail

Local ID Content: bob@bigcompanyhq.com

 

 

Peer ID Content: bob@bigcompanyhq.com

 

Telecommuter A (telecommutera.dydns.org)

Headquarters ZyWALL Rule 1:

Local ID Type: IP

Peer ID Type: IP

 

 

Local ID Content: 192.168.2.12

Peer ID Content: 192.168.2.12

VPN Screens

14-37