ZyXEL Communications ZYWALL 5 - V4.04 Guía de usuario descargar pdf (Pagina 171)

ZyXEL Confidential

404XD3C0.docx

171/181

Figure 4-2 Gateway on alias IP network

(2) Gateway on WAN side

A working topology is suggested as below.

Figure 5-3 Gateway on WAN side

Appendix 5 IPSec FQDN support

ZyWALL A-------------Router C (with NAT) ------------ZyWALL B

(WAN) (WAN) (LAN) (WAN)

If ZyWALL A wants to build a VPN tunnel with ZyWALL B by passing through

Router C with NAT, A can not see B. It has to secure gateway as C. However, ZyWALL B

will send it packet with its own IP and its ID to ZyWALL A. The IP will be NATed by

Router C, but the ID will remain as ZyWALL B sent.

In FQDN design, all three types, IP, DNS, E-Mail, can set ID content. For ID type is

DNS or E-mail, the behavior is simple. ZyWALL A and ZyWALL B only checks the ID

contents are consistent and they can connect.

1 2 ... 166 167 168 169 170 171 172 173 174 175 176 ... 180 181

Comentarios a estos manuales

Sin comentarios