Vpn 1-1 Mapping; Chapter 15 Vpn 1-1 Mapping; Vpn 1-1 Mapping Overview; What You Can Do In This Chapter - ZyXEL Communications UAG4100 User Manual

15.1 VPN 1-1 Mapping Overview

VPN 1-1 mapping allows an authenticated user in your network to access the Internet or an
external server using a public IP address different from the one used by the UAG's WAN interface.
With VPN 1-1 mapping, each user that logs into the UAG and matches a pre-configured mapping
rule can obtain an individual public IP address.
For example, users A and B are behind the UAG and both want to use a unique WAN IP address to
access a public server through the UAG's WAN1 interface. After the user is authenticated by the
UAG and meets the criteria in a VPN 1-1 mapping rule, the UAG applies the rule settings and
assigns a public IP address to the user. Outgoing traffic from user A will then be sent through the
WAN1 interface using the mapped public IP address 10.10.1.35. Outgoing traffic from user B will be
sent through the WAN1 interface using the mapped public IP address 10.10.1.36.
Figure 105 VPN 1-1 Mapping Example

15.1.1 What You Can Do in this Chapter

• Use the VPN 1-1 Mapping screens (see
1-1 mapping to assign a public IP address to each of users that match the rules.
• Use the VPN 1-1 Mapping > Profile screen (see
profile which defines the public IP address(es) that the UAG assigns to the matched users and
the interface through which the user's traffic is forwarded.

15.1.2 What You Need to Know

VPN 1-1 Mapping, Firewall and Policy Route
With VPN 1-1 mapping, the relevant packet flow for traffic from the matched user is:
UAG4100 User's Guide
C
HAPTER

VPN 1-1 Mapping

10.10.1.35
10.10.1.36
Section 15.2 on page 172) to enable and configure VPN
Section 15.3 on page
1 5
174) to configure a pool
171