ZyXEL Communications Modem n/a Manual de usuario descargar pdf (Pagina 93)

Chapter 14 IPSec Commands

DSL & IAD CLI Reference Guide

Figure 1 Dynamic VPN Rule l

Using the command ipsec swSkipOverlapIp on has ZyXEL Device X check if a

packet’s destination is also at the local network before forwarding the packet. If it is, the

ZyXEL Device sends the traffic to the local network. Setting ipsec

swSkipOverlapIp to off disables the checking for local network IP addresses.

2 You configure an IP alias network that overlaps with the VPN remote network. (See

Figure 2.)

For example, you have an IP alias network M (10.1.2.0/24) in ZyXEL Device X’s LAN.

For the VPN rule, you configure the VPN network as follows.

• Local IP address start: 192.168.1.1, end: 192.168.1.254

• Remote IP address start: 10.1.2.240, end: 10.1.2.254

IP addresses 10.1.2.240 to 10.1.2.254 overlap.

Figure 2 IP Alias

In this case, if you want to send packets from network A to an overlapped IP (ex.

10.1.2.241) that is in the IP alias network M, you have to set the swSkipOverlapIp

command to on.

192.168.1.0

1 2 ... 88 89 90 91 92 93 94 95 96 97 98 ... 221 222

Sin comentarios

ZyXEL Communications Modem n/a Manual de usuario Pagina 93