Zyxel-communications 5 Series Manuel d'utilisateur télécharger pdf (Page 225)

ZyWALL 5/35/70 Series User’s Guide

Chapter 11 Firewall 225

Figure 109 Block VPN to LAN Traffic by Default Example

11.3.3 From VPN To VPN Packet Direction

From VPN To VPN firewall rules apply to traffic that comes in through one of the

ZyWALL’s VPN tunnels and terminates at the ZyWALL (like for remote management) or

goes out through another of the ZyWALL’s VPN tunnels (this is called hub-and-spoke VPN,

see Section 18.16 on page 358 for details). The ZyWALL decrypts the traffic and applies the

firewall rules before re-encrypting it or allowing the traffic to terminate at the ZyWALL.

In the following example, the From VPN To VPN default firewall rule silently blocks the

traffic that the ZyWALL receives from any VPN tunnel (either A or B) that is destined for the

other VPN tunnel or the ZyWALL itself. VPN traffic destined for the DMZ is allowed

Pas de commentaire

Zyxel-communications 5 Series Manuel d'utilisateur Page 225