ZyXEL Communications 1000 Benutzerhandbuch

 Chapter 25 IPSec VPN

ZyWALL USG 1000 User’s Guide

VPN Connection (VPN Tunnel 1): 

• Local Policy: 192.168.1.0/255.255.255.0
• Remote Policy:192.168.11.0/255.255.255.0
• Disable Policy Enforcement

VPN Gateway (VPN Tunnel 2): 

• My Address: 10.0.0.1
• Peer Gateway Address: 10.0.0.3

VPN Connection (VPN Tunnel 2): 

• Local Policy: 192.168.1.0/255.255.255.0
• Remote Policy: 192.168.12.0/255.255.255.0
• Disable Policy Enforcement

Concentrator

• Add VPN tunnel 1 and VPN tunnel 2 to an IPSec VPN concentrator.

Firewall

• Block traffic from VPN tunnel 2 from accessing the LAN.

VPN Gateway (VPN Tunnel 2): 

• My Address: 10.0.0.3
• Peer Gateway Address: 10.0.0.1

VPN Connection (VPN Tunnel 2): 

• Local Policy: 192.168.12.0/255.255.255.0
• Remote Policy: 192.168.1.0/255.255.255.0
• Disable Policy Enforcement

Policy Route

• Source: 192.168.12.0
• Destination: 192.168.11.0
• Next Hop: VPN Tunnel 2

Consider the following when using the VPN concentrator.