Ipsec Gateway Simultaneously - ZyXEL Communications P-2602HWNLI Support Notes

P-2602HWNLI Support Notes
If the VPN connection is initiated from the security gateway behind Prestige, no configuration is
necessary for NAT nor Firewall.
If the VPN connection is initiated from the security gateway outside of Prestige, NAT port forwarding
and Firewall forwarding are necessary.
To configure NAT port forwarding, please go to WEB interface, Setup/ "SUA/NAT", put the secure
gateway's IP address in default server.
To configure Firewall forwarding, please go to WEB interface, Setup/Firewall, select Packet Direction to
WAN to LAN, and create a firewall rule the forwards IKE(UDP:500).
Can Prestige behave as a NAT router supporting IPSec passthrough and an IPSec
gateway simultaneously?
No, Prestige can't support them simultaneously. You need to choose either one. If Prestige is to support IPSec
passthrough, you have to disable the VPN function on Prestige. To disable it, you can either deactivate each
VPN rule or issue a CI command, "ipsec switch off" from SMT menu 24.8. You can get into SMT menu via
either telnet or console connection.
Wireless FAQ
What is a Wireless LAN ?
Wireless LANs provide all the functionality of wired LANs, without the need for physical connections
(wires). Data is modulated onto a radio frequency carrier and transmitted through the ether. Typical
bit-rates are 11Mbps and 54Mbps, although in practice data throughput is half of this. Wireless LANs can
be formed simply by equipping PC's with wireless NICs. If connectivity to a wired LAN is required an
Access Point (AP) is used as a bridging device. AP's are typically located close to the centre of the
wireless client population.
What are the advantages of Wireless LANs ?
a. Mobility:
Wireless LAN systems can provide LAN users with access to real-time information anywhere in their
organization. This mobility supports productivity and service opportunities not possible with wired
188
All contents copyright (c) 2006 ZyXEL Communications Corporation.