Zyxel ZyWALL USG 2000 [109/185] Ipsec vpn high availability

ZyWALL USG Support Notes

109

4. IPSec VPN High Availability

For nationwide or worldwide enterprise, it is always important to deploy a secure and

flexible enterprise network. For example, network administrator can apply IPSec VPN

for their branch offices and mobile employees to provide secured connections to

headquarter.

From the secure connections, each branch office has virtual leased line through

internet cloud. Hence, the enterprise has no need to pay extra expense for buying

leased line(s) and can save their money on long distance call once mobile employees

need to remote dial back to company.

Additionally, 7-24 operation with minimum failure time for branch offices to reach

HQ through VPN is another issue to deploy enterprise networks. Network

administrator can implement IPSec VPN High Availability feature to provide reliable

VPN tunnels to branch offices.

To use IPSec VPN HA feature, the HQ USG should have more than one public IP.

Once primary WAN IP is down, it can use secondary WAN IP to build VPN tunnels.

As soon as the primary WAN IP is up again, the VPN tunnel can fall back to use the

primary WAN IP.

4.1. Site-to-Site IPSec VPN HA/Fall Back

4.1.1. Application Scenario