Eicon Networks SHIVA 1100, Руководство администратора, Страница: 36 / 136

Advanced network settings
36 System Administrator’s Guide
Network address translation (NAT/masquerading)
The Shiva VPN Gateway can utilize IP Masquerading (a simple form of Network
Address Translation, or NAT) where computers on the local network effectively share
a single external IP address. Masquerading allows insiders to get out, without allowing
outsiders in. By default, the Internet port is setup to masquerade.
Masquerading has the following advantages:
• Added security because machines outside the local network only know the
gateway address.
• All machines on the local network can access the Internet using a single ISP
account.
• Only one public IP address is used and is shared by all machines on the local
network. Each machine has its own private IP address.
Note: It is strongly recommended that you leave Enable NAT on Internet Interface
checked.
Dynamic DNS
A dynamic DNS service is useful when you don't have a static Internet IP address, but
need to remain contactable by hosts on the Internet. Dynamic DNS service providers
such as TZO.com and dyndns.org can register an Internet domain name that will point
to your Internet IP address no matter how often it changes.
Whenever its Internet IP address changes, the Shiva VPN Gateway will alert the
dynamic DNS service provider so the domain name records can be updated
appropriately.
First, create an account with the dynamic DNS service provider of your choice.
Next, select your chosen Dynamic DNS service and click Continue . Select which
interface/connection's IP address you want associated with your newly created DNS
name from Internet Connection. Enter the details provided by your dynamic DNS
service provider and click
Apply to enable.