2013 Cradlepoint, Inc - Cradlepoint MBR1400 Product Manual

MBR1400 | USER MANUAL – Firmware version 4.2
CRADLEPOINT
NAT-T KeepAlive Interval: Default: 20 seconds. Range: 0-3600 seconds. 20 seconds will be sufficient in almost all
cases.
Tunnel Connect Retry: Default: 30 seconds. Range: 10-255 seconds. 30 seconds will be sufficient in almost all cases.
7.6.8 VPN with NAT-T
If one side of a planned VPN tunnel is behind a NAT (network address translation) firewall, the setup of your tunnel
requires the following specifications:
1. Each side of the tunnel must use both a Local Identity and a Remote Identity. These must match the identities on
the other side: The Local Identity must match the Remote Identity on the other side of the tunnel, and vice versa. In
this case, these identities can each be a simple word.
2. The Tunnel Name for the side of the tunnel that is not behind the NAT firewall must be "anonymous".
3. The VPN tunnel must be initiated from the side that is behind the NAT firewall.
© 2013 CRADLEPOINT, INC. PLEASE VISIT HTTP://KNOWLEDGEBASE.CRADLEPOINT.COM/ FOR MORE HELP AND RESOURCES PAGE 158