ZyXEL Communications 2602HWL-DXA Manual Do Utilizador

Página de 218
 
 
Prestige 2602HWL-DxA Support Notes 
 
 
 
All contents copyright (c) 2005 ZyXEL Communications Corporation.   
182
If the VPN connection is initiated from the security gateway behind Prestige, no configuration is 
necessary for NAT nor Firewall.   
If the VPN connection is initiated from the security gateway outside of Prestige, NAT port forwarding 
and Firewall forwarding are necessary.     
To configure NAT port forwarding, please go to WEB interface, Setup/ "SUA/NAT", put the secure 
gateway's IP address in default server. 
To configure Firewall forwarding, please go to WEB interface, Setup/Firewall, select Packet Direction to 
WAN to LAN, and create a firewall rule the forwards IKE(UDP:500). 
Can Prestige behave as a NAT router supporting IPSec passthrough and an IPSec 
gateway simultaneously? 
No, Prestige can't support them simultaneously. You need to choose either one. If Prestige is to support IPSec 
passthrough, you have to disable the VPN function on Prestige. To disable it, you can either deactivate each 
VPN rule or issue a CI command, "ipsec switch off" from SMT menu 24.8. You can get into SMT menu via 
either telnet or console connection. 
 
 
Wireless FAQ   
 
What is a Wireless LAN ? 
 
Wireless LANs provide all the functionality of wired LANs, without the need for physical connections 
(wires). Data is modulated onto a radio frequency carrier and transmitted through the ether. Typical 
bit-rates are 11Mbps and 54Mbps, although in practice data throughput is half of this. Wireless LANs can 
be formed simply by equipping PC's with wireless NICs.    If connectivity to a wired LAN is required an 
Access Point (AP) is used as a bridging device. AP's are typically located close to the centre of the 
wireless client population.   
 
What are the advantages of Wireless LANs ? 
 
a. Mobility: 
Wireless LAN systems can provide LAN users with access to real-time information anywhere in their 
organization. This mobility supports productivity and service opportunities not possible with wired