Configuration Examples - Page 51
An Un-numbered PPP WAN Link
Figure 23. An Un-numbered PPP WAN Link
Task Description
Step1
Configure the WAN link using the diagram
above and check for correct operation.
The following settings are required on the PPP
tab of the WAN Service form:
•
Header Compression Mode = <unselected>
•
Multilink/QoS =<unselected>
The IPSec tunnel will be established over
the WAN in order secure IP traffic between
the two subnets. Hence, the WAN link must
be established before attempting security
configuration.
IPSec does not use the normal QoS facilities
of IP Office.
Step 2
Install the IPSec Licence.
Licence name = IPSec tunneling.
An IPSec Licence is required per IP Office.
Make sure the IPSec licenses are valid on
both systems.
Step 3
For IP Office
Location A
create an IPSec
tunnel (see The IP Security Menu on page 24).
Main tab:
Local Configuration:
•
Name = IPSec_Tunnel
•
IP Address = 192.168.42.0
•
IP Mask = 255.255.255.0
•
Tunnel Endpoint IP Address =
<192.168.42.1>
Remote Configuration:
•
IP Address = 192.168.43.0
•
IP Mask = 255.255.255.0
•
Tunnel Endpoint IP Address =
<192.168.43.1>
A discrete name for the IPSec tunnel is
required.
The Local Configuration for the IP
Address/Mask and Remote IP Address/Mask
determines the range of IP addresses to be
secured through the tunnel.
The Local Tunnel Endpoint IP Address is the
near end tunnel endpoint. Hence, for
Location A, this will be 192.168.42.1, which
is the LAN1 IP address of Location A.
The Remote Tunnel Endpoint IP Address is
the far end tunnel endpoint. Hence, for
Location A, this will be 192.168.43.1, which
is the LAN1 IP address of Location B.
IP Office (R3.0) Virtual Private Networking
Configuration Examples - Page 51
40DHB0002UKER Issue 3 (4th February 2005)
Part 2: VPN configuration
