Table of Contents
Advertisement
TCP MSS rewriting
Anti-replay defense
IPsec applying ACL setting (IP filter)
NAT/NAPT concurrent operation
Others
VPN pass-through
[Note]
The static routing and IPsec remote ID setting priority are as follows.
When remote ID of IKE Phase2 is registered, a static route is automatically registered. This route has priority over
normal static routes. For the route for the IKE Phase2 local ID, since a static route is not registered automatically,
IPv4 routing setting must be added.
*Although the abovementioned is about IKEv1, for IKEv2 IKE_AUTH exchange setting, the same applies to local traffic
and remote traffic selectors.
[Limitations]
・For multiple subnets
In case on-demand connection with responder in aggressive mode, more than one subnet cannot be assigned to the
remote ID.
110
Function
Specification|
Fixed, AUTO
Possible
Static, Dynamic
Simultaneous operation of external connection is
allowed by NAT/NAPT and IPsec.
One session (static NAPT method)
Advertisement
Table of Contents
