CONEL SmartCluster [18/97] The ﬁrst three octets 192 68 of the real ip address are substituted by the ﬁrst three octets of

Превью страниц Страница 18 / 97

Part I 3 Concept

Figure 3.1: Example of a SmartCluster network scheme

Let’s assume that FACILITY 1’s camera in our example SmartCluster network scheme has the real IP

address 192.168.1.11. The VPN access to this camera will be realised via the 1:1 mapped VPN IP

address 10.10.1.11.

The ﬁrst three octets (= 192.168.1 ) of the real IP address are substituted by the ﬁrst three octets of

the VPN IP address (= 10.10.1). Or in other words the ﬁrst three octets of the VPN IP address are

mapped over the ﬁrst three octets of the real IP address.

The last octet of the IP address (= .11) is not affected by the mapping and is still used to access the

camera.

Table 1:1 NAT of VPN and real IP addresses in FACTORY 1 provides some examples to illustrate the

use of VPN IP addresses to access the real IP addresses in FACILITY 1’s LAN.

Table 3.1: 1:1 NAT of VPN and real IP addresses in FACTORY 1

VPN address LAN address

10.10.1.1 192.168.1.1

10.10.1.2 192.168.1.2

10.10.1.3 192.168.1.3

In our network scheme FACILITY 2 is locates behind another Conel router. This facility’s LAN is

conﬁgured with the same IP addresses as FACILITY 1 (192.168.1.0/255.255.255.0).

Let’s assume that FACILITY 2’s camera also can be accessed via the real IP address 192.168.1.11.

As the VPN IP address of FACILITY 2 (= 10.10.2.0) is different to the VPN IP address of FACILITY 1

(= 10.10.1.0), so you can access the FACILITY 2’s camera using the VPN IP address 10.10.2.11.