No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

AR Router Troubleshooting Guide

This Product Documentation provides guidance for maintaining AR Enterprise Router, covering common information collection and fault diagnostic commands, typical fault troubleshooting guide, and troubleshooting.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
How Do I Set Up an IPSec VPN Tunnel Between a Public Network and a Private Network?

How Do I Set Up an IPSec VPN Tunnel Between a Public Network and a Private Network?

To set up an IPSec VPN tunnel between two ends that are respectively located on a public network and private network, configure NAT traversal. In transport mode, NAT traversal inserts a standard UDP packet header between the original IP packet header and ESP packet header. In tunnel mode, NAT traversal inserts a standard UDP packet header between the new IP packet header and ESP packet header. When ESP packets pass through a NAT device, the NAT device translates the address and port number of the outer IP header and inserted UDP header. After the translated packets reach the peer end of the IPSec tunnel, the peer end processes these packets as common IPSec packets.

For the procedure of setting up an IPSec VPN tunnel using NAT traversal, see Example for Establishing an IPSec Tunnel Through NAT Traversal.

NOTE:
AH authenticates the entire IP packet. Any modification in the IP header causes an AH check failure. Therefore, NAT traversal cannot be implemented on an IPSec tunnel protected by AH.
Translation
Download
Updated: 2019-05-10

Document ID: EDOC1000079719

Views: 446440

Downloads: 4301

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next