Accelerated 6310-DX, User Manual, Page: 79 / 235

6350-SR's settings so it only allows inbound tunnels from that IP, input the 6300-CX's public
IP address here.
8. Set
IKE -> Mode IKE -> Mode
to
Aggressive mode Aggressive mode
.
9. Uncheck the
IKE -> Initiate connection IKE -> Initiate connection
option.
10. Set
IKE -> Phase 1 Proposals IKE -> Phase 1 Proposals
and
IKE -> Phase 2 Proposals IKE -> Phase 2 Proposals
. In this example, both proposals
are set to 3DES, SHA1, MODP1024.
11. Under NAT NAT, add a destination that corresponds to the local address range of the *remote*
device. (In this example, it'd be 172.21.1.1/24.)
Under
Policies Policies
, click
Add Add
to create a new policy, and enter the following settings:
1. Set Policy -> Local network -> Type Policy -> Local network -> Type to Custom network. Custom network.
2. Set Policy -> Local network -> Custom network Policy -> Local network -> Custom network to the IPv4 network you wish to have on the
LAN side of the 6300-CX. In the sample, this is 172.20.1.1/24
3. Set Policy -> Remote network Policy -> Remote network to the IPv4 network you wish to access through the tunnel. (In
the sample, this is 172.21.1.1/24)
Under Firewall Firewall , click Packet Filtering Packet Filtering to ensure Allow all outgoing traffic Allow all outgoing traffic item exists and enabled.
User Manual
Page 79 Page 79 6310-DX