The Peplink Balance Behind A Nat Router - peplink Balance One User Manual

USER MANUAL
Peplink Balance Series

12.2 The Peplink Balance Behind a NAT Router

TM
The Peplink Balance supports establishing SpeedFusion over WAN connections which are behind a
NAT (network address translation) router.
To enable a WAN connection behind a NAT router to accept VPN connections, you can configure the
NAT router in front of the WAN connection to inbound port-forward TCP port 32015 to the Peplink
Balance.
If one or more WAN connections onUnit A can accept VPN connections (by means of port forwarding or
not) while none of the WAN connections on the peer Unit B can do so, you should enterall of Unit A's
public IP addresses or hostnames into Unit B'sRemoteIP Addresses / Host Namesfield. Leave the field
TM
in Unit A blank. With thissetting, a SpeedFusion connection can be set up and all WAN connections on
both sides will be utilized.
See the following diagram for an example of this setup in use:
One of the WANs connected toBalance A is non-NAT'd (212.1.1.1). The rest of the WANs connected
toBalance A and all WANs connected toBalance B are NAT'd. In thiscase, the Peer IP Addresses / Host
Names field forBalance B should be filled with all of Balance A's hostnames or public IP addresses (i.e.,
212.1.1.1, 212.2.2.2, and 212.3.3.3), and the field in Balance A can be left blank. The two NAT routers on
WAN1 and WAN3 connected to Balance A should inbound port-forward TCP port 32015 to Balance A so
that all WANs will be utilizedin establishing the VPN.
http://www.peplink.com -96 / 227 - Copyright © 2014 Peplink