ZyXEL Communications 10 Instrukcja Użytkownika Pobierz pdf (Strona 62)

ZyWALL SSL 10 Support Notes

1) UDP 500 (IKE) must be forwarded to ZyWALL to accept incoming VPN connection

from peer VPN gateway or client.

2) If Firewall is running on the same NAT router, make sure a firewall rule is configured to

allow IKE/IPSec (AH/ESP) traffic to pass-through.

VPN->VPN Rule (IKE) on ZyWALL

Configuration on Peer VPN gatewayConfiguration on Local ZyWALL

VPN->VPN Rule (IKE) on ZyWALL

WAN->WAN1 or WAN2

3) On ZyWALL, enable “NAT Traversal” no matter if the front NAT router supports NAT

Traversal (IPSec pass-through) or not. With this option enabled, ZyWALL can detect if

it is placed behind NAT when peer VPN entity also support NAT Traversal function. If

yes, the IPSec traffic will be encapsulated in UDP packet to avoid traversal problem on

NAT routers.

4) Under VPN->Gateway Policy-> Gateway Policy Information configure the private

IP address as “My Address” on local ZyWALL gateway (behind NAT router).

1 2 ... 57 58 59 60 61 62 63 64 65 66 67 ... 101 102

Brak uwag

ZyXEL Communications 10 Instrukcja Użytkownika Strona 62