All devices register their IP address and [usually dynamic] port with the VPN registry. When any device (MZ, Z3, etc) needs a VPN to another device, it looks up the VPN registry to get the IP address and port of the other device, and builds a VPN directly to it.
... View more