Operating Mode Screen - ZyXEL Communications LTE7460-M608 User Manual

NAT
In the simplest form, NAT changes the source IP address in a packet received from a subscriber (the
inside local address) to another (the inside global address) before forwarding the packet to the WAN
side. When the response comes back, NAT translates the destination address (the inside global address)
back to the inside local address before forwarding it to the original inside host. See
78 for advanced technical information on NAT.
Certification Authorities
A Certification Authority (CA) issues certificates and guarantees the identity of each certificate owner.
There are commercial certification authorities like CyberTrust or VeriSign and government certification
authorities.
Certification Path
A certification path is the hierarchy of certification authority certificates that validate a certificate. The
LTE7460-M608 does not trust a certificate if any certificate on its path has expired or been revoked.
Certificate Directory Servers
Certification authorities maintain directory servers with databases of valid and revoked certificates. A
directory of certificates that have been revoked before the scheduled expiration is called a CRL
(Certificate Revocation List). The LTE7460-M608 can check a peer's certificate against a directory
server's list of revoked certificates. The framework of servers, software, procedures and policies that
handles keys is called PKI (public-key infrastructure).
Advantages of Certificates
Certificates offer the following benefits.
• The LTE7460-M608 only has to store the certificates of the certification authorities that you decide to
trust, no matter how many devices you need to authenticate.
• Key distribution is simple and very secure since you can freely distribute public keys and you never
need to transmit private keys.
Certificate File Format
The certification authority certificate that you want to import has to be in PEM (Base-64) encoded X.509
file format. This Privacy Enhanced Mail format uses 64 ASCII characters to convert a binary X.509
certificate into a printable form.

7.2 Operating Mode Screen

The LTE7460-M608 offers two different operation modes: Router mode and Bridge mode. The LTE7460-
M608 is set to Router mode by default.
Chapter 7 Networking
LTE7460-M608 User's Guide
59
Section 7.17 on page