ZyXEL P-661H Series Manual de usuario descargar pdf (Pagina 186)

Chapter 12 VPN Screens

P-661H/HW Series User’s Guide

186

Finally, NAT is compatible with ESP in tunnel mode because integrity checks are performed

over the combination of the "original header plus original payload," which is unchanged by a

NAT device. The compatibility of AH and ESP with NAT in tunnel and transport modes is

summarized in the following table.

Y* - This is supported in the ZyXEL Device if you enable NAT traversal.

12.8 Remote DNS Server

In cases where you want to use domain names to access Intranet servers on a remote network

that has a DNS server, you must identify that DNS server. You cannot use DNS servers on the

LAN or from the ISP since these DNS servers cannot resolve domain names to private IP

addresses on the remote network

The following figure depicts an example where three VPN tunnels are created from ZyXEL

Device A; one to branch office 2, one to branch office 3 and another to headquarters. In order

to access computers that use private domain names on the headquarters (HQ) network, the

ZyXEL Device at branch office 1 uses the Intranet DNS server in headquarters. The DNS

server feature for VPN does not work with Windows 2000 or Windows XP.

Figure 107 VPN Host using Intranet DNS Server Example

If you do not specify an Intranet DNS server on the remote network, then the VPN host must

use IP addresses to access the computers on the remote network.

Table 73 VPN and NAT

SECURITY PROTOCOL MODE NAT

AH Transport N

AH Tunnel N

ESP Transport Y*

ESP Tunnel Y

1 2 ... 181 182 183 184 185 186 187 188 189 190 191 ... 357 358

Sin comentarios

ZyXEL P-661H Series Manual de usuario Pagina 186