When Do I Need Ddns Service; What Ddns Servers Does The Zyxel Device Support; What Is Ddns Wildcard; Does The Zyxel Device Support Ddns Wildcard - ZyXEL Communications P-2302RL-P1 Support Notes

P2302RL-P1 Support Notes

When do I need DDNS service?

When you want your internal server to be accessed by using DNS name rather than using the dynamic IP
address we can use the DDNS service. The DDNS server allows to alias a dynamic IP address to a static
hostname. Whenever the ISP assigns you a new IP, the ZyXEL Device sends this IP to the DDNS server for its
updates.

What DDNS servers does the ZyXEL Device support?

The DDNS servers the ZyXEL Device supports currently is WWW.DYNDNS.ORG where you apply the DNS
from and update the WAN IP to.

What is DDNS wildcard?

Some DDNS servers support the wildcard feature which allows the hostname, *.yourhost.dyndns.org, to be
aliased to the same IP address as yourhost.dyndns.org. This feature is useful when there are multiple servers
inside and you want users to be able to use things such as www.yourhost.dyndns.org and still reach your
hostname.

Does the ZyXEL Device support DDNS wildcard?

Yes, the ZyXEL Device supports DDNS wildcard that WWW.DynDNS.ORG supports. When using wildcard,
you simply enter yourhost.dyndns.org in the Host field in Menu 1.1.
Can the ZyXEL Device SUA handle IPsec packets sent by the VPN gateway behind ZyXEL
Device?
Yes, the ZyXEL Device's SUA can handle IPsec ESP Tunneling mode. We know when packets go through
SUA, SUA will change the source IP address and source port for the host. To pass IPsec packets, SUA must
understand the ESP packet with protocol number 50, replace the source IP address of the IPsec gateway to the
router's WAN IP address. However, SUA should not change the source port of the UDP packets which are used
for key managements. Because the remote gateway checks this source port during connections, the port thus is
not allowed to be changed.

How do I setup my ZyXEL Device for routing IPsec packets over SUA?

For outgoing IPsec tunnels, no extra setting is required. For forwarding the inbound IPsec ESP tunnel, A
'Default' server set in menu 15 is required. It is because SUA makes your LAN appear as a single machine to
the outside world. LAN users are invisible to outside users. So, to make an internal server for outside access, we
114
All contents Copyright  2007 ZyXEL Communications Corporation.