ZyXEL Communications USG-300 - V2.20 ED 2, Руководство пользователя

Страница: 513 / 1149

Chapter 25 IPSec VPN
ZyWALL USG 300 User’s Guide
513
Each kind of translation is explained below. The following example is used to help
explain each one.
Figure 368 VPN Example: NAT for Inbound and Outbound Traffic
Source Address in Outbound Packets (Outbound Traffic, Source NAT)
This translation lets the ZyWALL route packets from computers that are not part of
the specified local network (local policy) through the IPSec SA. For example, in
Figure 368 on page 513 , you have to configure this kind of translation if you want
computer M to establish a connection with any computer in the remote network
( B ). If you do not configure it, the remote IPSec router may not route messages
for computer M through the IPSec SA because computer M ’s IP address is not part
of its local policy.
To set up this NAT, you have to specify the following information:
• Source - the original source address; most likely, computer M ’s network.
• Destination - the original destination address; the remote network ( B ).
• SNAT - the translated source address; the local network ( A ).
Source Address in Inbound Packets (Inbound Traffic, Source NAT)
You can set up this translation if you want to change the source address of
computers in the remote network. To set up this NAT, you have to specify the
following information:
• Source - the original source address; the remote network ( B ).
• Destination - the original destination address; the local network ( A ).