UAG CLI Reference Guide 120
CHAPTER 16
VPN 1-1 Mapping
This chapter shows you how to configure VPN 1-1 mapping on your UAG.
16.1 VPN 1-1 Mapping Overview
VPN 1-1 mapping allows an authenticated user in your network to access the Internet or an
external server using a public IP address different from the one used by the UAG’s WAN interface.
With VPN 1-1 mapping, each user that logs into the UAG and matches a pre-configured mapping
rule can obtain an individual public IP address. This helps especially when multiple users need to
access different remote servers through separate VPN tunnels via the UAG. Each user can use a
unique public IP address to transmit traffic through a separate VPN tunnel. The VPN connection will
not be disconnected due to response packets with the same source IP address coming from remote
servers in different VPN tunnels.
16.2 VPN 1-1 Mapping Commands
The following table identifies the values required for many of these commands. Other input values
are discussed with the corresponding commands.
Table 64 Input Values for vpn-1-1-map Commands
LABEL DESCRIPTION
interface_name The name of the interface. This depends on the UAG model.
See Table 24 on page 70 for detailed information about the interface name.
profile_name The name of the pool profile. You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
address_object The name of an IP address (group) object. You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
user_name The name of a user (group). You may use 1-31 alphanumeric characters,
underscores(_), or dashes (-), but the first character cannot be a number. This value is
case-sensitive.
To Next Page
Loading...
