Enterasys Networks Network Card - Manual (Page 44)

32
RiverMaster Administrator’s Guide
Before You Begin Chapter 3
Configuring an ANG-3000/7000
Packets that are addressed with non-routable addresses are typically blocked
by firewalls and Internet gateways and will be dropped by any Internet
router. The only exceptions to this rule are devices such as “proxy” servers
that perform a network address translation (NAT) to dynamically re-address
packets as they leave the corporate network. If you do not have a NAT device,
you can enable Intelligent Client Routing so that packets sent from the
Aurorean Client computer to an Internet destination are addressed with the
computer’s own IP address (not the non-routable address allocated from the
virtual subnet).
Figure 14 Aurorean Virtual Network’s Intelligent Client Routing Feature
INTERNET
Intelligent Client Routing DISABLED
Intelligent Client Routing ENABLED
The Tunnel
Router Firewall
Internet
Server
Packets addressed to
server on Internet
INTERNET
The Tunnel
Router Firewall
Internet
Server
POP
Network
Gateway
Aurorean
Network
Gateway
Aurorean Aurorean Client
Aurorean Client