Avaya BCM50 Manual do Utilizador descarregar pdf (Página 10)

Router – Virtual Private Networking

10 NN40011-047 Issue 1.2 BCM50 Rls 6.0

VPN and NAT

Normally it is not possible to set up a VPN when there is a NAT Router in

between two VPN switches. This is because the NAT Router changes the

header of the outgoing IPSec packet so it does not match the header for

which the receiving VPN switch is checking. Therefore, the receiving VPN

switch does not respond and the tunnel cannot be built.

The BCM50 Integrated Router solves this problem by the use of NAT

Traversal; an option that can be selected when configuring VPN Branch rules.

Both VPN switches should have NAT Traversal enabled.

Note: For NAT Traversal to be successful, the VPN Branch rule should be

configured to use the ESP algorithm and also to use tunnel mode.

VPN Branch IP Relationships

The configuration of VPN Branch rules requires the definition of both global

(WAN IP address used on the Internet) and private (LAN IP addresses) IP

Addresses. The reason for this is so that a path can be securely set up from

one LAN to another, via WAN IP addresses used on the internet. The

following diagram helps explain the relationship between these global and

LAN IP addresses involved in VPN connections.

1 2 ... 5 6 7 8 9 10 11 12 13 14 15 ... 51 52

Sem comentários

Avaya BCM50 Manual do Utilizador Página 10