每个物理或基于云的站点的连接类型定义了该站点如何连接到Cato Cloud。 下表列出了连接类型及其支持的功能:
连接类型 | 多个WAN | 绕过 | 本地端口转发 | 网络 |
|---|---|---|---|---|
Socket X1500, X1600, X1700 | 是 | 是 | 是 | 完全 |
AWS/Azure/ESX vSocket | 是 | 是 | 是 | 完全 |
Cato-initiated IPsec IKEv1 | - | - | - | 部分 |
IPSec IKEv2 | - | - | - | 部分 |
我该使用哪种IPsec连接类型?
使用正确的IPsec连接类型取决于将站点连接到Cato Cloud所涉及的环境和防火墙。 In general, IPsec IKEv2 is the more robust and we recommend that you use it whenever possible for the Connection Type. However, it is not always supported - for example Azure only supports IKEv1 for policy-based VPN gateways.
For sites that use IPsec IKEv1, the option is Cato-initiated Connection Type. 这意味着Cato Cloud启动与站点的连接,并且能够轻松处理到另一链接的故障转移。
For Cisco ASA appliances, there is a known incompatibility with Cato IKEv2 sites, read more.