3Com OfficeConnect 3CR856-95, User Manual

Page: 54 / 96

54
Gateway Two is located at the sales office and is configured with
the following settings:
■
Internet IP address: 174.27.34.202
■
LAN IP address: 192.168.2.1
■
LAN Subnet Mask: 255.255.255.0
To set up an IPSec Connection between the two Gateways, do
the following on each Gateway:
1
Select IPSec Enabled from the VPN Mode screen.
2 Switch to the IPSec Connections screen and click on the New
button.
3
In the Connection Name field enter: headsales
4 In the Description field enter: Connection between head office
and sales office.
5 Ensure that the Gateway to gateway radio button is selected.
6 Enter the Internet IP address of the Gateway you are configuring
in the
This Gateway’s ID field.
a Enter 174.19.201.162 on Gateway One.
b
Enter 172.27.34.202 on Gateway Two.
7
Enter the Internet IP address of the other Gateway in the Remote
IPSec Server Address field.
a
Enter 174.27.34.202 on Gateway One.
b Enter 172.19.201.162 on Gateway Two.
8
Enter the IP address of the other LAN subnet in the Remote
Network address field.
a Enter 192.168.2.0 on Gateway One.
b
Enter 192.168.1.0 on Gateway Two.
9 Enter a password in the Tunnel Shared Key field in both
Gateways. The example uses TYP0249//23b as the shared key.
10
Choose DES as the Encryption Type .
11 Choose Diffie-Hellman Group 1 (768 bit) the in the Exchange
keys using drop-down box.
12
Ensure that the Use Perfect Forward Secrecy box is checked
13 Click the Apply button to save your changes.
Setting PPTP End Points
PPTP (Point-to-Point Tunnelling Protocol) is an encrypted VPN
protocol like IPSec. It is not as secure as IPSec but is easy to
administrate. PPTP does not support Gateway to Gateway
connections and is only suitable for connecting remote users.
To set up the Gateway for PPTP you must allocate IP addresses
from the Gateway’s LAN for use with PPTP. The connections
made by PPTP will appear to come from these addresses. The
addresses must be in a continuous range.
■
Enter the first LAN address you wish to reserve for PPTP in the
First Remote IP Address field.
■
Enter the last LAN address you wish to reserve for PPTP in the
Last Remote IP Address field.
These addresses must be within the Gateway’s LAN subnet and
must not form part of the DHCP pool.
Click the Apply button to save your changes.
dua08569-5aaa01.book Page 54 Wednesday, March 13, 2002 10:39 AM