IPSec VPN - Policy Based?

BMS

I've been asked to set up a policy based VPN instead of route based.  I'm not even sure what the difference is or if it can be done with a ZyXel firewall.  I've done a bunch of IPSec VPN work, but all the same configuration, and apparently there is a difference.

Zyxel_Cooldia

Route based VPN is more flexible than policy based.
e.g. you can run dynamic routing, IGMP proxy in Route based VPN. Dual wan traffic routing with policy route for failover.
Terminology:

Policy-based VPN- Policy-based VPNs encrypt and encapsulate a subset of traffic flowing through an interface according to a defined policy.

Route-based VPN- A route based VPN creates a virtual IPSec interface, and whatever traffic hits that interface is encrypted and decrypted according to the phase 1 and phase 2 IPSec settings. 

BMS

Thank you!

How do you go about setting up a route-based VPN through IPSec there?

Zyxel_Cooldia

HI @BMS,
You may refer to this this post to set up route-based VPN.
https://community.zyxel.com/en/discussion/9867/vpn100-ipsec-tunnel-more-then-one-remote-network