ZyXEL Vantage CNM User Guide - Page 137

Chapter 6 Device Security Settings 6.2 VPN This section shows you how to configure the VPN screens. These screens may vary depending on which model you're configuring. Please see the device's User's Guide for more information about any of these screens or fields. There are two sets of VPN screens, VPN version 1.0 and VPN version 1.1. The version depends on the device's type and firmware version. 6.3 IPSec High Availability IPSec high availability (also known as VPN high availability) allows you to use a redundant (backup) VPN connection to another WAN interface on the remote IPSec router if the primary (regular) VPN connection goes down. In the following figure, if the primary VPN tunnel (A) goes down, the device uses the redundant VPN tunnel (B). Figure 56 IPSec High Availability When setting up a IPSec high availability VPN tunnel, the remote IPSec router: • Must have multiple WAN connections • Only needs the configure one corresponding IPSec rule • Should only have IPSec high availability settings in its corresponding IPSec rule if your device has multiple WAN connections • Should ideally identify itself by a domain name or dynamic domain name (it must otherwise have My Address set to 0.0.0.0) • Should use a WAN connectivity check to this device's WAN IP address If the remote IPSec router is not a device, you may also want to avoid setting the IPSec rule to nailed up. Vantage CNM User's Guide 137