Cal Amp vanguard, Руководство пользователя

Страница: 49 / 69

48

NAT Mode
Determines how packets are addressed. Selecting Bypass will allow packets coming from Local Subnet addresses
through the NAT firewall unchanged. This may be sufficient when traffic only travels from Local Subnet to Remote
Subnet. (LAN Settings > Bind to Eth IP may need to be enabled to make sure that packets generated by Vanguard
services appear to originate from a Local Subnet address.) NAT changes the source address to match the Status >
PPP IP Address. NAT-Traversal enables the NAT-T protocol which can support traffic beyond just the Local &
Remote Subnets.
Tunnel Configuration

Tunnel Item
Tunnel number, starts from 1 and increments for each new tunnel. To update an existing tunnel, use its
corresponding number from the tunnel table. To add a new tunnel, use the last tunnel shown in the Tunnel Table
+ 1.

Label
This is a label to identify a tunnel and must correspond to the name specified for the remote endpoint.

Remote IP Address
The IP address of the remote endpoint of the tunnel.

Remote Subnet
Choose None if encrypted packets are only destined for the Remote IP Address. Use an IP address / mask if
encrypted packets are also destined for the specified network that is beyond the Remote IP Address.
IMPORTANT:
The Remote Subnet and Local Subnet addresses must not overlap!

Local Subnet
Choose None if only packets generated by Vanguard services will be sent over the tunnel. Choose Ethernet if
packets from the local LAN will also be sent over the tunnel. (LAN Settings > Bind to Eth IP may need to be enabled
to make sure that packets generated by Vanguard services appear to originate from a Local Subnet address.) Use
an IP address / mask if a network beyond the local LAN will be sending packets over the tunnel.
IMPORTANT: The
Remote Subnet and Local Subnet addresses must not overlap!

Phase 1 Encryption
Use AES-128, AES-256 or 3DES encryption.

Phase 1 Authentication
Use MD5 or SHA1 hashing.

Phase 1 DH Group
Negotiate (Auto) or use 768 (Group 1), 1024 (Group 2), 1536 (Group 5) or 2048 (Group 14) bit keys.

Phase 1 Key Lifetime
How long the keying channel of a connection should last before being renegotiated.