P-660R-Tx v2 Series Support Notes
the ISP assigns you a new IP, the P-660R-Tx v2 sends this IP to the DDNS
server for its updates.
10. What is DDNS wildcard? Does the P-660R-Tx v2 support DDNS
wildcard?
Some DDNS servers support the wildcard feature which allows the hostname,
*.yourhost.dyndns.org, to be aliased to the same IP address as
yourhost.dyndns.org. This feature is useful when there are multiple servers
inside and you want users to be able to use things such as
www.yourhost.dyndns.org and still reach your hostname.
Yes, the P-660R-Tx v2 supports DDNS wildcard that http://www.dyndns.org/
supports. When using wildcard, you simply enter yourhost.dyndns.org in the
Host
field in Menu 1.1 Configure Dynamic DNS.
11. Can the P-660R-Tx v2's SUA handle IPSec packets sent by the IPSec
gateway?
Yes, the P-660R-Tx v2's SUA can handle IPSec ESP Tunneling mode. We
know when packets go through SUA, SUA will change the source IP address
and source port for the host. To pass IPSec packets, SUA must understand
the ESP packet with protocol number 50, replace the source IP address of the
IPSec gateway to the router's WAN IP address. However, SUA should not
change the source port of the UDP packets which are used for key
managements. Because the remote gateway checks this source port during
connections, the port thus is not allowed to be changed.
12. How do I setup my P-660R-Tx v2 for routing IPSec packets over SUA?
For outgoing IPSec tunnels, no extra setting is required.
For forwarding the inbound IPSec ESP tunnel, A 'Default' server set in menu
15.2.1 is required. It is because SUA makes your LAN appear as a single
machine to the outside world. LAN users are invisible to outside users. So, to
make an internal server for outside access, we must specify the service port
and the LAN IP of this server in Menu 15. Thus SUA is able to forward the
incoming packets to the requested service behind SUA and the outside users
access the server using the P-660R-Tx v2's WAN IP address. So, we have to
configure the internal IPsec as a default server (unspecified service port) in
menu 15.2.1 when it acts a server gateway.
12
All contents copyright © 2006 ZyXEL Communications Corporation.
