ZyXEL Communications 2602HWL-DXA User Manual

Page of 218
 
 
Prestige 2602HWL-DxA Support Notes 
 
 
 
All contents copyright (c) 2005 ZyXEL Communications Corporation.   
179
What VPN software that has been tested with Prestige successfully?       
We have tested Prestige successfully with the following third party VPN software.   
• 
SafeNet Soft-PK, 3DES edition   
• 
Checkpoint Software   
• 
SSH Sentinel, 1.4   
• 
SecGo IPSec for Windows   
• 
F-Secure IPSec for Windows   
• 
KAME IPSec for UNIX   
• 
Nortel IPSec for UNIX   
• 
Intel VPN, v. 6.90   
• 
FreeS/WAN for Linux   
• 
SSH Remote ISAKMP Testing Page, (http://isakmp-test.ssh.fi/cgi-bin/nph-isakmp-test)   
• 
Windows 2000, Windows XP IPSec   
Will ZyXEL support Secure Remote Management? 
Yes, we will support it and we are working on it currently.   
Does Prestige VPN support NetBIOS broadcast? 
The current 3.50 firmware release does not support it. But it is in our wish list.   
Is the host behind NAT allowed to use IPSec?  
NAT Condition 
Supported IPSec Protocol 
VPN Gateway embedded NAT 
AH tunnel mode, ESP tunnel mode 
VPN client/gateway behind NAT
*
 
ESP tunnel mode 
NAT in Transport mode 
None 
* The NAT router must support IPSec pass through. For example, for Prestige SUA/NAT routers, IPSec 
pass through is supported since ZyNOS 3.21. The default port and the client IP have to be specified in 
menu 15-SUA Server Setup. 
Why does VPN throughput decrease when staying in SMT menu 24.1?   
If Prestige stays in menu 24.1, 24.8 and 27.3 a certain of memory is allocated to generate the required 
statistics.   So, we do not suggest to stay in menu 24.1, 27.3 and 24.8 when VPN is in use.