Filter
Top Products
ProSecure Unified Threat Management (UTM) Appliance Reference Manual
Virtual Private Networking Using IPsec Connections 7-7
v1.0, January 2010
.
.
This VPN tunnel will use
following local WAN Interface
(dual-WAN port models only)
For the dual-WAN port models only, select one of the two radio buttons
(WAN1 or WAN2) to specify which local WAN interface the VPN tunnel
uses as the local endpoint.
Note: If a dual-WAN port model is configured to function in WAN auto-
rollover mode, after completing the wizard, you must manually update
the VPN policy to enable VPN rollover. For more information, see
“Manually Adding or Editing a VPN Policy” on page 7-33.
End Point Information
a
What is the Remote WAN's IP
Address or Internet Name?
Enter the IP address or Internet name (FQDN) of the WAN interface on
the remote VPN tunnel endpoint.
What is the Local WAN's IP
Address or Internet Name?
When you select the Gateway radio button in the About VPN Wizard
section of the screen, the IP address of the UTM’s active WAN
interface is automatically entered.
Secure Connection Remote Accessibility
What is the remote LAN IP
Address?
Enter the LAN IP address of the remote gateway.
Note: The remote LAN IP address must be in a different subnet than
the local LAN IP address. For example, if the local subnet is
192.168.1.x, then the remote subnet could be 192.168.10.x. but could
not be 192.168.1.x. If this information is incorrect, the tunnel will fail to
connect.
What is the remote LAN
Subnet Mask?
Enter the LAN subnet mask of the remote gateway.
a. Both local and remote endpoints should be defined as either FQDNs or IP addresses. A combination of an IP address and
a FQDN is not supported.
Tip: To assure tunnels stay active, after completing the wizard, manually edit the
VPN policy to enable keepalive which periodically sends ping packets to
the host on the peer side of the network to keep the tunnel alive. For more
information, see “The VPN Policies Screen” on page 7-31.
Tip: For DHCP WAN configurations, first set up the tunnel with IP addresses.
After you have validated the connection, you can use the wizard to create
new policies using the FQDN for the WAN addresses.
Table 7-2. (IPsec) VPN Wizard Settings for a Gateway-to-Gateway Tunnel (continued)
Setting Description (or Subfield and Description)