User's Manual

Pepwave MAX and Surf User Manual

http://www.pepwave.com

12.2 The Pepwave Router Behind a NAT Router

Pepwave routerssupport establishing SpeedFusion

over WAN connections which are

behind a NAT (network address translation) router.

To enable a WAN connection behind a NAT router to accept VPN connections, you can

configure the NAT router in front of the WAN connection to inbound port-forward TCP

port 32015 to the Pepwave router.

If one or more WAN connections onUnit A can accept VPN connections (by means of

port forwarding or not), while none of the WAN connections on the peer Unit B can do

so, you should enter all of Unit A’s public IP addresses or hostnames into Unit

B’sRemote IP Addresses / Host Namesfield. Leave the field in Unit A blank. With this

setting, a SpeedFusion

connection can be set up and all WAN connections on both

sides will be utilized.

See the following diagram for an example of this setup in use:

One of the WANs connected to RouterA is non-NAT’d (212.1.1.1). The rest of the

WANs connected to RouterA and all WANs connected to RouterB are NAT’d. In this

case, the Peer IP Addresses / Host Names field for RouterB should be filled with all of

RouterA’s hostnames or public IP addresses (i.e., 212.1.1.1, 212.2.2.2, and 212.3.3.3),

and the field in RouterA can be left blank. The two NAT routers on WAN1 and WAN3

connected to Router A should inbound port-forward TCP port 32015 to Router A so that

all WANs will be utilized in establishing the VPN.