Pepwave MAX, User Manual

Page: 91 / 121

http://www.pepwave.com 91 Copyright @ 2013 Pepwave
17.3 Service Passthrough
Service Passthrough settings can be found in Advanced > Misc. Settings > Service Passthrough :
Some Internet services required to be specially handled in a multi-WAN environment. The Pepwave MAX
supports handling such services correctly such that Internet applications do not notice it is behind a multi-
WAN router. Settings for Service Passthrough Support are available here.
Service Passthrough Support
SIP
Session Initiation Protocol, aka SIP, is a voice-over-IP protocol. Pepwave MAX can act as a
SIP Application Layer Gateway (ALG) which binds connections for the same SIP session to the
same WAN connection and translate IP address in the SIP packets correctly in NAT mode.
Such passthrough support is always enabled and there are two modes for selection:
Standard
Mode and Compatibility Mode .
If your SIP server’s signal port number is non-standard, you can check the box
Define custom
signal ports and input the port numbers to the text boxes.
H.323
With this option enabled, protocols that provide audio-visual communication sessions will be
defined on any packet network and passthrough the device.
FTP
FTP sessions consist of two TCP connections; one for control and one for data. In multi-WAN
situation, they have to be binded to the same WAN connection. Otherwise, problems will arise
in transferring files. By default, the Pepwave MAX monitors TCP control connections on port
21 for any FTP connections and binds TCP connections of the same FTP session to the same
WAN.
If you have an FTP server listening on a port number other than 21, you can check the box
Define custom control ports and enter the port numbers to the text boxes.
TFTP
The Pepwave MAX monitors outgoing TFTP connections and routes any incoming TFTP data
packets back to the client. Select
Enable if you want to enable the TFTP Passthrough support.
IPsec NAT-T
This field is for enabling the support of IPsec NAT-T Passthrough. UDP ports 500, 4500 and
10000 are monitored by default.
You may add more custom data ports that your IPsec system uses by checking the box Define
custom ports. If the VPN contains IPsec Site-to-Site VPN traffic, you have to check the
box Route IPsec Site-to-Site VPN and choose the WAN connection to route the traffic to.
If you have IPsec
SpeedFusion
TM
traffic routed, check the Route IPsec
SpeedFusion
TM
option and select a WAN to force routing such traffic to the specified WAN.