Filter
Top Products
Reference Manual for the ProSafe VPN Firewall FVS318v3
6-16 Advanced Virtual Private Networking
January 2005
The IKE Phase 2 parameters used in Scenario 1 are:
• TripleDES
• SHA-1
• ESP tunnel mode
• MODP group 2 (1024 bits)
• Perfect forward secrecy for rekeying
• SA lifetime of 3600 seconds (one hour) with no kilobytes rekeying
• Selectors for all IP protocols, all ports, between 10.5.6.0/24 and 172.23.9.0/24, using IPv4
subnets
FVS318v3 Scenario 1: FVS318v3 to Gateway B IKE and VPN
Policies
Note: This scenario assumes all ports are open on the FVS318v3. You can verify this by reviewing
the security settings as seen in the Figure 4-2 on page 4-3.
Figure 6-6: LAN to LAN VPN access from an FVS318v3 to an FVS318v3
Use this scenario illustration and configuration screens as a model to build your configuration.
1. Log in to the FVS318v3 labeled Gateway A as in the illustration.
Log in at the default address of http://192.168.0.1 with the default user name of admin and
default password of password, or using whatever password and LAN address you have
chosen.
2. Configure the WAN (Internet) and LAN IP addresses of the FVS318v3.
a. From the main menu Setup section, click the Basic Setup link to go back to the Basic
Settings menu.
FVS318
Gateway B
Scenario 1
14.15.16.17 22.23.24.25
WAN IP
WAN IP
172.23.9.1/2410.5.6.1/24
LAN IP
LAN IP
Gateway A
FVS318