Vpn 1-1 Mapping; Vpn 1-1 Mapping Overview; Vpn 1-1 Mapping Commands - ZyXEL Communications UAG Series User Manual

This chapter shows you how to configure VPN 1-1 mapping on your UAG.

16.1 VPN 1-1 Mapping Overview

VPN 1-1 mapping allows an authenticated user in your network to access the Internet or an
external server using a public IP address different from the one used by the UAG's WAN interface.
With VPN 1-1 mapping, each user that logs into the UAG and matches a pre-configured mapping
rule can obtain an individual public IP address. This helps especially when multiple users need to
access different remote servers through separate VPN tunnels via the UAG. Each user can use a
unique public IP address to transmit traffic through a separate VPN tunnel. The VPN connection will
not be disconnected due to response packets with the same source IP address coming from remote
servers in different VPN tunnels.

16.2 VPN 1-1 Mapping Commands

The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
Table 64 Input Values for vpn-1-1-map Commands
LABEL
interface_name
profile_name
address_object
user_name
UAG CLI Reference Guide
C
DESCRIPTION
The name of the interface. This depends on the UAG model.
See Table 24 on page 70 for detailed information about the interface name.
The name of the pool profile. You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
The name of an IP address (group) object. You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
The name of a user (group). You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
HAPTER

VPN 1-1 Mapping

1 6
120