ZyXEL Communications Internet Security Gateway ZyWALL 2 Series - Manual (Page 213)

ZyWALL 2 Series User’s Guide
VPN Screens 14-7
14.7.2 X-Auth (Extended Authentication)
Extended authentication provides added security by allowing you to use usernames and passwords for VPN
connections. This is especially helpful when multiple ZyWALLs use one VPN rule to connect to a single
ZyWALL. An attacker cannot make a VPN connection without a valid username and password.
The extended authentication server checks the user names and passwords of the extended authentication
clients before completing the IPSec connection (see also the Authentication Server section).
A ZyWALL can be an extended authentication server for some VPN connections and an extended
authentication client for other VPN connections.
14.7.3 Remote DNS Server
In cases where you want to use domain names to access Intranet servers on a remote network that has a DNS
server, you must identify that DNS server. You cannot use DNS servers on the LAN or from the ISP since
these DNS servers cannot resolve domain names to private IP addresses on the remote network
The following figure depicts an example where three VPN tunnels are created from ZyWALL A; one to
branch office 2, one to branch office 3 and another to headquarters. In order to access computers that use
private domain names on the headquarters (HQ) network, the ZyWALL at branch office 1 uses the Intranet
DNS server in headquarters. The DNS server feature for VPN does not work with Windows 2000 or
Windows XP
Figure 14-4 VPN Host using Intranet DNS Server Example