ZyXEL Communications Prestige 652, User Manual, Page: 210 / 521

Prestige 652 Series User’s Guide
17-26 VPN Screens
Figure 17-9 Telecommuters Sharing One VPN Rule Example
17.16.2 Telecommuters Using Unique VPN Rules Example
With aggressive negotiation mode (see section 17.10.1 ), the Prestige can use the ID types and contents to
distinguish between VPN rules. Telecommuters can each use a separate VPN rule to simultaneously access a
Prestige at headquarters. They can use different IPSec parameters (including the pre-shared key) and the
local IP addresses (or ranges of addresses) can overlap.
See the following graphic for an example where three telecommuters each use a different VPN rule to initiate
a VPN connection to a Prestige located at headquarters. The Prestige at headquarters identifies each by its
secure gateway address (a dynamic domain name) and uses the appropriate VPN rule to establish the VPN
connection.