Motorola Netopia 3342N - Manual (Page 357)

357
VPN IPSec Pass Through
This Motorola Netopia® ser vice suppor ts your independent VPN client software in a transparent manner.
Motorola Netopia® has implemented an Application Layer Gateway (ALG) to suppor t multiple PCs running IP
Security protocols.
This feature has three elements:
1.
On power up or reset, the address mapping function (NAT) of the Gateway’s WAN con-
figuration is turned on by default.
2.
When you use your third-party VPN application, the Gateway recognizes the traffic from
your client and your unit. It allows the packets to pass through the NAT “protection
layer” via the encrypted IPSec tunnel.
3. The encrypted IPSec tunnel is established “through” the Gateway.
A typical VPN IPSec Tunnel pass through is diagrammed below:
☛
NOTE:
Typically, no special configuration is necessar y to use the IPSec pass through feature.
In the diagram, VPN PC clients are shown behind the Motorola Netopia® Gateway and the
secure ser ver is at Corporate Headquar ters across the WAN. You cannot have your secure
ser ver behind the Motorola Netopia® Gateway.
When multiple PCs are star ting IPSec sessions, they must be star ted one at a time to allow
the associations to be created and mapped.
VPN IPSec Tunnel Termination
This Motorola Netopia® ser vice suppor ts termination of VPN IPsec tunnels at the Gateway. This permits
tunnelling from the Gateway without the use of third-par ty VPN client software on your client PCs.
Motorola Netopia®
Gateway