ZyXEL Communications SBG3500-N000 - VPN Configuration

SBG3500-N Series User’s Guide
275
CHAPTER 22
IPSec VPN
22.1 Overview
A virtual private network (VPN) provides secure communications between sites without the expense
of leased site-to-site lines. A secure VPN is a combination of tunneling, encryption, authentication,
access control and auditing. It is used to transport traffic over the Internet or any insecure network
that uses TCP/IP for communication.
Internet Protocol Security (IPSec) is a standards-based VPN that offers flexible solutions for secure
data communications across a public network like the Internet. IPSec is built around a number of
standardized cryptographic techniques to provide confidentiality, data integrity and authentication
at the IP layer.
The following figure provides one perspective of a VPN tunnel.
Figure 141 IPSec VPN: Overview
The VPN tunnel connects the SBG3500-N Series (X) and the remote IPSec router (Y). These routers
then connect the local network (A) and remote network (B).
22.2 What You Can Do in this Chapter
•Use the Setup screen to display and manage the SBG3500-N Series’s IPSec VPN rules (tunnels)
(Section 22.4 on page 276).
•Use the Monitor screen to display and manage active IPSec VPN connections (Section 22.5 on
page 285).
•Use the Radius screen to manage the list of RADIUS servers the SBG3500-N Series can use in
authenticating users (Section 22.6 on page 286).
VPN Tunnel
X
Y
Network A Network B