ZyXEL Communications ZYWALL 70 - V4.03 Informacje Techniczne Pobierz pdf (Strona 69)

normal function.

Figure 5-2 Gateway on alias IP network

(2) Gateway on WAN side

A working topology is suggested as below.

Figure 5-3 Gateway on WAN side

Appendix 5 IPSec FQDN support

ZyWALL A-------------Router C (with NAT) ------------ZyWALL B

(WAN) (WAN) (LAN) (WAN)

If ZyWALL A wants to build a VPN tunnel with ZyWALL B by passing through

Router C with NAT, A can not see B. It has to secure gateway as C. However, ZyWALL

B will send it packet with its own IP and its ID to ZyWALL A. The IP will be NATed by

Router C, but the ID will remain as ZyWALL B sent.

In FQDN design, all three types, IP, DNS, E-Mail, can set ID content. For ID type is

DNS or E-mail, the behavior is simple. ZyWALL A and ZyWALL B only checks the ID

1 2 ... 64 65 66 67 68 69 70 71 72 73 74 ... 81 82

Komentarze do niniejszej Instrukcji

Brak uwag