Nokia IP30 - Satellite Plus - Security Appliance, Руководство пользователя

Страница: 105 / 164

Nokia IP30 User Guide 105
To access a resource that is protected by a VPN in No-NAT mode,
you must contact the IP address of the final computer in the
destination network that you want to reach.
Note
You can establish VPN tunnels between a combination of NAT and No-NAT
devices. This possibility is not discussed in this guide.
No-NAT Mode
Use no-NAT mode in site-to-site VPNs, where bi-directional
initiation of traffic within a VPN is required between hosts with
routable IP addresses.
Note
You can only use No-NAT mode with IP30 Satellite.
The Figure below shows a site-to-site VPN in No-NAT mode. Both
VPN peers are considered site-to-site VPN gateways, and traffic is
directly established from the source host to the destination host. In
this example, hosts on either network can initiate traffic to hosts on
the peer network. Both Network 1 and Network 2 are using routable
IP addresses.
Figure 11 No-NAT Mode
IP30 Satellite
FW-1/ VPN-1
Routable IP
Network - 1 Routable IP
Network -2
Internet
Initiate VPN Tunnels