ZyXEL Communications ZyWALL 310 - How to Use Dual-WAN to Perform Fail-Over on VPN Using the VPN Concentrator

135/749
www.zyxel.com
How to Use Dual-WAN to Perform Fail-Over on VPN Using
the VPN Concentrator
This is an example of using Dual-WAN to perform fail-over on a hub-and-spoke
VPN with the HQ ZyWALL/USG as the hub and spoke VPNs to Branches A and B.
When the VPN tunnel is configured, traffic passes between branches via the hub
(HQ). Traffic can also pass between spoke-and-spoke through the hub. If the
primary WAN interface is unavailable, the backup WAN interface will be used.
When the primary WAN interface is available again, traffic will use that interface
again.
Hub & Spoken VPN Using the VPN Concentrator with Backup
WAN
Note: All network IP addresses and subnet masks are used as examples in this article.
Please replace them with your actual network IP addresses and subnet masks. This
example was tested using USG310 (Firmware Version: ZLD 4.25).