ZyXEL Communications P-202H Plus v2, Support Notes

Page: 33 / 434

P-202H Plus v2 Support Notes
NAT
*
NAT in Transport mode None
* The NAT router must support IPSec pass through. For example, for P-202H
Plus v2 SUA/NAT routers, IPSec pass through is supported since ZyNOS 3.21.
The default port and the client IP have to be specified in menu 15-SUA Server
Setup.
14. Why does VPN throughput decrease when staying in SMT menu 24.1?
If P-202H Plus v2 stays in menu 24.1, 24.8 and 27.3 a certain of memory is
allocated to generate the required statistics. So, we do not suggest to stay in
menu 24.1, 27.3 and 24.8 when VPN is in use.
15. How do I configure P-202H Plus v2 with NAT for internal servers?
Generally, without IPSec, to configure an internal server for outside access, we
need to configure the server private IP and its service port in SUA/NAT Server
Table.
However, if both NAT and IPSec is enabled in P-202H Plus v2, the edit of the
table is necessary only if the connection is a non-secure connections. For secure
connections, none SUA server settings are required since private IP is reachable
in the VPN case.
For example:
host-----------P-202H Plus v2(NAT)-----------------Internet----Secure host
\
\
Non-secure host
SSH Sentinel FAQ
All contents copyright © 2006 ZyXEL Communications Corporation.
33