VPN > Settings
895
SonicOS 5.8.1 Administrator Guide
• If you wish to use a router on the LAN for traffic entering this tunnel destined for an
unknown subnet, for example, if you configured the other side to Use this VPN
Tunnel as default route for all Internet traffic, you should enter the IP address
of your router into the Default LAN Gateway (optional) field.
• Select an interface or zone from the VPN Policy bound to menu. A Zone WAN is
the preferred selection if you are using WAN Load Balancing and you wish to allow
the VPN to use either WAN interface.
–
If you selected IKEv2 in the Proposals tab:
• Select Enable Keep Alive to use heartbeat messages between peers on this VPN
tunnel. If one end of the tunnel fails, using Keepalives will allow for the automatic
renegotiation of the tunnel once both sides become available again without having
to wait for the proposed Life Time to expire.
• Select Suppress automatic Access Rules creation for VPN Policy to turn off the
automatic access rules created between the LAN and VPN zones for this VPN
policy.
• Select Enable Windows Networking (NetBIOS) Broadcast to allow access to
remote network resources by browsing the Windows® Network Neighborhood.
• Select Enable Multicast to allow IP multicasting traffic, such as streaming audio
(including VoIP) and video applications, to pass through the VPN tunnel.
• Select Apply NAT Policies if you want the SonicWALL to translate the Local,
Remote or both networks communicating via this VPN tunnel. To perform Network
Address Translation on the Local Network, select or create an Address Object in
the Translated Local Network menu. To translate the Remote Network, select or
create an Address Object in the Translated Remote Network menu. Generally, if
NAT is required on a tunnel, either Local or Remote should be translated, but not
both. Apply NAT Policies is particularly useful in cases where both sides of a
tunnel use either the same or overlapping subnets.