Dell W-Series 324 Instant 6.5.1.0-4.3.1.0 User Guide - Page 239
IAP-VPN Forwarding Modes, Local Mode, Local, L2 Mode
View all Dell W-Series 324 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 239 highlights
l Branches-The number of IAP-VPN branches that can be terminated on a given controller platform. l Routes-The number of L3 routes supported on the controller. l L3 mode and NAT mode users-The number of trusted users supported on the controller. There is no scale impact on the controller. They are limited only by the number of clients supported per W-IAP. l L2 mode users-The number of L2 mode users are limited to 128,000 for W-7220 or W-7240 Controllers and 64,000 across all platforms. IAP-VPN Forwarding Modes The forwarding modes determine whether the DHCP server and default gateway for clients reside in the branch or at the datacenter. These modes do not determine the firewall processing or traffic forwarding functionality. The VC enables different DHCP pools (various assignment modes) in addition to allocating IP subnets for each branch. The VC allows different modes of forwarding traffic from the clients on a VLAN based on the DHCP scope configured on the W-IAP. For the IAP-VPN deployments, the following forwarding modes are supported: l Local mode l L2 Switching mode l L3 routing mode The DHCP scopes associated with these forwarding modes are described in the following sections. Ensure that VLAN 1 is not configured for any of the DHCP scopes as it is reserved for a different purpose. Local Mode In this mode, the W-IAP cluster at that branch has a local subnet and the master W-IAP of the cluster acts as the DHCP server and gateway for clients. The local mode provides access to the corporate network using the inner IP of the IPsec tunnel. The network address for traffic destined to the corporate network is translated at the source with the inner IP of the IPsec tunnel and is forwarded through the IPsec tunnel. The traffic destined to the non-corporate network is translated using the IP address of the W-IAP and is forwarded through the uplink. When the local mode is used for forwarding client traffic, hosts on the corporate network cannot establish connections to the clients on the W-IAP, because the source addresses of the clients are translated. Local, L2 Mode In this mode, the W-IAP cluster at that branch has a local subnet and the master W-IAP of the cluster acts as the DHCP server. The default gateway is located outside the W-IAP and the network address for the client traffic is not translated at source. In the Local, L2 mode, access to the corporate network is supported only in a single W-IAP cluster. The traffic to the non-corporate network is locally bridged. Local, L3 Mode In this mode, the network address for traffic destined to the corporate network is translated at the source with the inner IP of the IPsec tunnel and is forwarded through the IPsec tunnel. The traffic destined to the noncorporate network is routed. 239 | IAP-VPN Deployment Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide