ZyXEL Communications ZyXEL ZyWALL 2WE - Manual (Page 322)

ZyWALL 2 and ZyWALL 2WE
27-28 VPN/IPSec Setup
Figure 27-10 Telecommuters Sharing One VPN Rule Example
27.16.2 Telecommuters Using Unique VPN Rules Example
With aggressive negotiation mode (see section 27.10.1), the ZyWALL can use the ID types and contents to
distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a
ZyWALL at headquarters. They can use different IPSec parameters (including the pre-shared key) and the
local IP addresses (or ranges of addresses) can overlap.
See the following graphic for an example where three telecommuters each use a different VPN rule to initiate
a VPN connection to a ZyWALL located at headquarters. The ZyWALL at headquarters identifies each by its
ID type and contents and uses the appropriate VPN rule to establish the VPN connection.