Download Configuring NAT

Transcript
Office Mode Solution
IP Address Lease duration
When a remote user’s machine is assigned an IP address, that machine can use it
for a certain amount of time. This time period is referred to as the “IP address
lease duration.” The remote client automatically asks for a lease renewal after half
of the IP lease duration period has elapsed. Hence, if the IP lease duration time is
set to 60 minutes, a renewal request will be sent after 30 minutes. If a renewal is
granted, the client will request a renewal again after 30 minutes and so on. If the
renewal fails, the client attempts again after half of the remaining time, e.g. 15
minutes, then 7.5 minutes, etc. If no renewal is granted and the 60 minutes of the
lease duration times out, the tunnel link terminates. To renew the connection the
remote user must reconnect to the gateway. Upon reconnection, an IKE
renegotiation is initiated and a new tunnel created.
When the IP address is allocated from a predefined IP pool on the gateway, the
gateway determines the IP lease duration period, default being 15 minutes.
When using a DHCP server to assign IP addresses to users, the DHCP server’s
configuration determines the IP lease duration. When a user disconnects and
reconnects to the gateway within a short period of time, it is likely that the user will
get the same IP address as before.
Using name resolution - WINS and DNS
To facilitate access of a remote user to resources on the internal network, the
administrator can specify WINS and DNS servers for the remote user. This
information is sent to the remote user during IKE config mode along with the IP
address allocation information, and is used by the remote user’s operating system
for name-to-IP resolution when the user is trying to access the organization’s
internal resources.
482