ZyXEL Communications 10 Bedienungsanleitung PDF herunterladen (Seite 62)

ZyWALL SSL 10 Support Notes

1) UDP 500 (IKE) must be forwarded to ZyWALL to accept incoming VPN connection

from peer VPN gateway or client.

2) If Firewall is running on the same NAT router, make sure a firewall rule is configured to

allow IKE/IPSec (AH/ESP) traffic to pass-through.

VPN->VPN Rule (IKE) on ZyWALL

Configuration on Peer VPN gatewayConfiguration on Local ZyWALL

VPN->VPN Rule (IKE) on ZyWALL

WAN->WAN1 or WAN2

3) On ZyWALL, enable “NAT Traversal” no matter if the front NAT router supports NAT

Traversal (IPSec pass-through) or not. With this option enabled, ZyWALL can detect if

it is placed behind NAT when peer VPN entity also support NAT Traversal function. If

yes, the IPSec traffic will be encapsulated in UDP packet to avoid traversal problem on

NAT routers.

4) Under VPN->Gateway Policy-> Gateway Policy Information configure the private

IP address as “My Address” on local ZyWALL gateway (behind NAT router).

1 2 ... 57 58 59 60 61 62 63 64 65 66 67 ... 101 102

Keine Kommentare

ZyXEL Communications 10 Bedienungsanleitung Seite 62