The Peplink Balance Behind A Nat Router - peplink ONE 20 User Manual

USER MANUAL
Peplink Balance Series

13.2 The Peplink Balance Behind a NAT Router

TM
The Peplink Balance supports establishing SpeedFusion over WAN connections
which are behind a NAT (network address translation) router.
To enable a WAN connection behind a NAT router to accept VPN connections, you can
configure the NAT router in front of the WAN connection to inbound port-forward TCP
port 32015 to the Peplink Balance.
If one or more WAN connections onUnit A can accept VPN connections (by means of
port forwarding or not), while none of the WAN connections on the peer Unit B can do
so, you should enterall of Unit A's public IP addresses or hostnames into Unit
B'sRemoteIP Addresses / Host Namesfield. Leave the field in Unit A blank. With
TM
thissetting, a SpeedFusion connection can be set up and all WAN connections on both
sides will be utilized.
See the following diagram for an example of this setup in use:
One of the WANs connected toBalance A is non-NAT'd (212.1.1.1). The rest of the
WANs connected toBalance A and all WANs connected toBalance B are NAT'd. In
thiscase, the Peer IP Addresses / Host Names field forBalance B should be filled with
all of Balance A's hostnames or public IP addresses (i.e., 212.1.1.1, 212.2.2.2, and
212.3.3.3), and the field in Balance A can be left blank. The two NAT routers on WAN1
and WAN3 connected to Balance A should inbound port-forward TCP port 32015 to
Balance A so that all WANs will be utilizedin establishing the VPN.
http://www.peplink.com -113 / 258 - Copyright © 2015 Peplink