ZyXEL Communications ZyXEL ZyAIR 100 - Manual (Page 235)

ZyWALL 10~100 Series Internet Security Gateway
VPN Screens 15-29
Figure 15-10 Telecommuters Sharing One VPN Rule Example
15.17.2 Telecommuters Using Unique VPN Rules Example
With aggressive negotiation mode (see section 15.11.1), the ZyWALL can use the ID types and contents to
distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a
ZyWALL at headquarters. They can use different IPSec parameters (including the pre-shared key) and the
local IP addresses (or ranges of addresses) can overlap.
See the following graphic for an example where three telecommuters each use a different VPN rule to initiate
a VPN connection to a ZyWALL located at headquarters. The ZyWALL at headquarters identifies each by its
secure gateway address (a dynamic domain name) and uses the appropriate VPN rule to establish the VPN
connection.