ZyXEL Communications 10 Manual de usuario descargar pdf (Pagina 61)

ZyWALL SSL 10 Support Notes

Gateway).

NAT routers sit on the border between private and public (Internet) networks, converting

private addresses in each IP packet into legally registered public ones. NAT is commonly

supported by Internet access routers that sit at the network edge. However, IPSec is

NAT-sensitive protocol which means modification on IPSec traffic may cause failure of

VPN connection.

By far the easiest way to combine IPSec and NAT is to completely avoid these problems by

locating IPSec endpoints in public address space. This can be accomplished in two ways:

1) Perform NAT on a device located behind IPSec gateway

2) Use an IPSec gateway for both IPSec (VPN) and NAT (Internet Access).

However, in some situation, it is inevitable to locate IPSec gateway in public IP address and

it must be placed behind the NAT router. For example, the NAT router has a different

interface (e.g. leased line, ISDN) which are not supported by IPSec gateway. This example

gives some guideline for configuring ZyWALL behind NAT router.

1 2 ... 56 57 58 59 60 61 62 63 64 65 66 ... 101 102

Sin comentarios

ZyXEL Communications 10 Manual de usuario Pagina 61