Vpn/Inat (Intelligent Address Translation) - Proxim Orinoco AP-2500 User Manual

Network Parameters
VPN/iNAT
(Intelligent Address Translation)
Many companies support Virtual Private Network (VPN) connections to provide secure network access for employees
in remote locations. The VPN connection establishes a secure, encrypted tunnel between the employee and the
company's VPN server over the public Internet.
VPNs are a popular application for hotspot subscribers. For example, a business traveler can establish a VPN session
with his company's network at an airport or a hotel and access the same network resources that are available to him
when he's physically in the office.
To create a VPN connection, a company needs a VPN server on the Internet. An employee needs VPN client software
installed on his computer and a connection to the Internet. There are multiple tunneling and encapsulation techniques
available and can vary from company to company.
In general, a subscriber with a public, routable IP address can establish a VPN session with his company without
involving the AP-2500. However, must subscribers in your hotspot will use private IP address assigned by the AP
performing Network Address Translation (NAT). (See
Therefore, you must configure the AP to support VPN connections.
The AP-2500 supports two of the most popular VPN protocols when performing NAT:
• Point-to-Point Tunneling Protocol (PPTP)
• Internet Protocol Security Protocol (IPSec) using Encapsulating Security Payload (ESP)
The VPN configuration information is found at Configure > Security > VPN/iNAT. By default, these two protocols are
enabled. Follow these steps if you want to change the default VPN settings:
Figure 4-20 VPN/iNAT Screen
1. Click Configure > Security > VPN/iNAT.
2. Configure the Enable PPTP field to enable or disable PPTP support.
• By default, PPTP is enabled.
3. If required, enable PPTD ID tagging by placing a check in the PPTP ID field.
4. Configure the IPSec field to enable or disable IPSec support.
• By default, IPSec is enabled.
5. Click OK.
6. If configuring iNAT entries, perform the procedure
the changes to take effect.
97
Dynamic Address Translation (DAT)
Adding Entries to the iNAT Table. Otherwise, reboot the AP for
for information on NAT.)