ZyXEL Vantage CNM User Guide - Page 331

Chapter 11 IPSec VPN Table 130 Device Operation > Device Configuration > VPN > IPSec VPN > VPN Connection > Add/Edit (IKE) (continued) LABEL DESCRIPTION SNAT Select the address object that represents the translated source address (or select Create Object to configure a new one). This is the address that hides the original source address. The size of the original source address range (Source) must be equal to the size of the translated source address range (SNAT). Destination NAT This translation forwards packets (for example, mail) from the remote network to a specific computer (for example, the mail server) in the local network. # This field is a sequential value, and it is not associated with a specific NAT record. However, the order of records is the sequence in which conditions are checked and executed. Original IP Select the address object that represents the original destination address. This is the address object for the remote network. Mapped IP Select the address object that represents the desired destination address. For example, this is the address object for the mail server. Protocol Select the protocol required to use this translation. Choices are: TCP, UDP, or All. Original Port These fields are available if the protocol is TCP or UDP. Enter the original destination port or range of original destination ports. The size of the original port range must be the same size as the size of the mapped port range. Mapped Port These fields are available if the protocol is TCP or UDP. Enter the translated destination port or range of translated destination ports. The size of the original port range must be the same size as the size of the mapped port range. Add icon This column contains icons to add, move, and remove NAT records. To add a NAT record, click the Add icon at the top of the column. To move a NAT record, click the Move to N icon next to the record, and then type the row number to which you want to move it. The records are renumbered automatically. Total Records Apply Cancel To remove a NAT record, click the Remove icon next to the record. The Vantage CNM confirms that you want to delete the NAT record before doing so. This field displays the total number of NAT records in the table. Click Apply to save the changes. Click Cancel to discard all changes and return to the main VPN screen. 11.1.2 IPSec VPN Connection Add/Edit (Manual Key) If you want to use a manual key instead of an IKE key, select manual key in the VPN Connection Add/Edit screen. This is useful if you have problems with IKE key management. Vantage CNM User's Guide 331