How Many Network Users Can The Sua/Nat Support; How Can I Protect Against Ip Spoofing Attacks - ZyXEL Communications P-660R-Tx v3 Series Support Notes

The following table summarizes the five types.

11. How many network users can the SUA/NAT support?

The P-660R-Tx v3 does not limit the number of the users but the number of
the NAT sessions. The P-660R-Tx v3 supports 1024 sessions that you can use
the 'ip nat session' command in CLI to see. You can also use
„ip nat hashTable wanif0‟ to view the current active NAT sessions.

12. How can I protect against IP spoofing attacks?

The P-660R-Tx v3's filter sets provide a means to protect against IP spoofing
attacks. The basic scheme is according to your need to set different filter
type.There are three types of filter: IP/MAC Filter, Application Filter, and URL
Filter. You can use IP/MAC filter to decide the input data or output one to be
filtered or you may simply set filter conditions depend on your application or
URL.
All contents copyright © 2008 ZyXEL Communications Corporation.
NAT Type IP Mapping
One-to-One ILA1<--->IGA1
ILA1<--->IGA1
Many-to-One
ILA2<--->IGA1
(SUA/PAT)
...
ILA1<--->IGA1
ILA2<--->IGA2
Many-to-Many
ILA3<--->IGA1
Overload
ILA4<--->IGA2
...
ILA1<--->IGA1
ILA2<--->IGA2
Many
ILA3<--->IGA3
One-to-One
ILA4<--->IGA4
...
Server 1 IP<--->IGA1
Server
Server 2 IP<--->IGA1
P-660R-Tx v3 Series Support Notes
10