Nomadix AG-2000W, Руководство пользователя

Страница: 23 / 254

N
OMADIX
AG-2000
W
™ / AG-2000
WA
™
Introduction 19
iNAT™
Nomadix invented a new way of intelligently supporting multiple VPN connections
to the same termination at the same time (iNAT™), thus solving a key problem of
many Public-access networks.
Nomadix’ patent-pending iNAT™ (intelligent Network Address Translation) feature
contains an advanced, real-time translation engine that analyzes all data packets being
communicated between the private address realm and the public address realm.
The NSE performs a defined mode of network address translation based on packet
type and protocol (for example, GRE, ISAKMP etc.). UDP packet fragmentation is
supported to provide more seamless translation engine for certificate-based VPN
connections.
If address translation is needed to ensure the success of a specific application (for
example, multiple users trying to access the same VPN termination server at the same
time), the packet engine selects an IP address from a freely definable pool of publicly
routable IP addresses. The same public IP address can be used as a source IP to
support concurrent tunnels to different termination devices—offering unmatched
efficiency in the utilization of costly public IP addresses. If the protocol type can be
supported without the use of a public IP (for example, HTTP, FTP), our proven
Dynamic Address Translation™ functionality continues to be used.
Some of the benefits of iNAT™ include:
‹
Improves the success rate of VPN connectivity by misconfigured users, thus
reducing customer support costs and boosting customer satisfaction.
‹
Maintains the security benefits of traditional address translation technologies
while enabling secure VPN connections for mobile workers accessing
corporate resources from a Public-access location.
‹
Dynamically adjusts the mode of address translation during the user's
session, depending on the packet type.
‹
Supports users with static private IP addresses (for example, 192.168.x.x) or
public (different subnet) IP addresses without any changes to the client IP
settings.
‹
Dramatically heightens the reusability factor of costly public IP addresses.