Pepwave MAX, User Manual

Page: 58 / 121

http://www.pepwave.com 58 Copyright @ 2013 Pepwave
10.3 Pepwave MAX Behind NAT Router
The Pepwave MAX supports establishing SpeedFusion
TM
over WAN connections which are behind a NAT
(Network Address Translation) router.
To be able for a WAN connection behind a NAT router to accept VPN connections, you can configure the
NAT router in front of the WAN connection to forward TCP port 32015 to it.
If one or more WAN connections on Unit A can accept VPN connections (by means of port forwarding or
not) while none of the WAN connections on the peer Unit B can do so, you should put all public IP
addresses or host names of the Unit A to the Unit B
’s
Remote IP Addresses / Host Names field. Leave
the field in Unit A blank. With such setting, SpeedFusion
TM
connection can be set up and all WAN
connections on both sides will be utilized.
For example, see the following diagram:
One of the WANs of Router A is non-
NAT’d (
212.1.1.1 ). The rest of the WANs on Router A and all WANs
on Router
B are NAT’d. In such case, the
Remote IP Addresses / Host Names field in Router B should
be filled with all of the Router
A’s host names or public IP addresses (i.e.
212.1.1.1, 212.2.2.2 and
212.3.3.3 ), and the field in Router A can be left blank. The two NAT routers on WAN1 and WAN3 of
Router A should inbound port forward TCP port 32015 to the Router A so that all WANs would be utilized
to establish VPN.