Nortel Networks BCM50a Network Router User Manual


 
226 Chapter 13 VPN
N0115790
Virtual Ending IP
Address
When the Type field is configured to One-to-one or
Many-to-One, this field is N/A.
When the Type field is configured to Many One-to-one, enter the
ending (static) IP address of the range of IP addresses that you
want to use for the VPN tunnel.
Local Local IP addresses must be static and correspond to the remote
IPSec router's configured remote IP addresses.
Two active SAs can have the same local or remote IP address, but
not both. You can configure multiple SAs between the same local
and remote IP addresses, as long as only one is active at a time.
Two IP policies can have the same local or remote IP address, but
not both.
In order to have more than one active rule with the Secure
Gateway Address field set to 0.0.0.0, the ranges of the local IP
addresses cannot overlap between rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway
Address field and the full IP address range of the LAN as the local
IP address, then you cannot configure any other active rules with
the Secure Gateway Address field set to 0.0.0.0.
Address Type Use the drop-down menu to choose Single Address, Range
Address, or Subnet Address. Select Single Address for a single
IP address. Select Range Address for a specific range of IP
addresses. Select Subnet Address to specify IP addresses on a
network by their subnet mask.
Starting IP Address When the Address Type field is configured to Single Address,
enter a (static) IP address on the LAN behind your BCM50a
Integrated Router. When the Address Type field is configured to
Range Address, enter the beginning (static) IP address, in a
range of computers on your LAN behind your BCM50a Integrated
Router. When the Address Type field is configured to Subnet
Address, this is a (static) IP address on the LAN behind your
BCM50a Integrated Router.
Ending IP Address /
Subnet Mask
When the Address Type field is configured to Single Address,
this field is N/A. When the Address Type field is configured to
Range Address, enter the end (static) IP address, in a range of
computers on the LAN behind your BCM50a Integrated Router.
When the Address Type field is configured to Subnet Address,
this is a subnet mask on the LAN behind your BCM50a Integrated
Router.
Table 54 VPN Branch Office — IP Policy
Label Description