4
Virtual Private Network
When setting the minimum router configuration you must use the client Virtual Private Network (VPN) IP address and Domain
Name Server (DNS) name instead of the client IP address and DNS name when configuring the IP hostname for the CWI client.
This mapping is required for the client to receive notifications from the router. See Step 3 in the “Setting the Minimum Router
Configuration” section on page 7.
If you have a VPN, you can use the basic or SSL encryption configurations. See the “Setting Up the Required Management
Services with a Secure Connection” section on page 8 and “Setting Up the Required Management Services Without a Secure
Connection” section on page 8 for procedures.
Dual-Homed
Dual-homed devices are used to bridge two networks. You can run an instance of CWI on the dual-homed device so that you
can access the secondary network. You will require terminal services or X-client software to run the CWI graphical application
from the client PC. A dual-homed device contains a client-side interface (IP address) and router-side interface (IP address). The
client-side is the primary interface, and the router-side is the secondary interface. (See Figure 1.)
Figure 1
Dual-Homed Device Configuration
When setting the minimum router configuration you must use the dual-homed device router-side (secondary) IP address and
DNS name when configuring the IP hostname for the CWI client. This mapping is required for the client to view the notifications
from the router received by the dual-home instance of CWI. See Step 3 in the “Setting the Minimum Router Configuration”
section on page 7.
If you have a dual-homed device in your network, you can use the standard or SSL encryption configurations. See the “Setting
Up the Required Management Services with a Secure Connection” section on page 8 and “Setting Up the Required Management
Services Without a Secure Connection” section on page 8 for procedures.
Prerequisites
Prerequisites ensure that the CWI client and router are correctly set up to allow them to communicate. Meeting all prerequisites
before starting any of the procedures in this guide is recommended to ensure successful communication between the CWI client
and router.
The following prerequisites are provided:
•
CWI Client System Prerequisites, page 5
•
Router Prerequisites, page 6
•
CWI Client Prerequisites, page 6
Notifications
49901 to 49950
Outbound
Telnet/SSH
23/22
Inbound
Table 1
Firewall Ports (continued)
Component
Port
Direction
P
R
I
M
A
R
Y
S
E
C
O
N
D
A
R
Y
Dual-homed device
Client PC
Router
111615
Summary of Contents for CRS-1 Series
Page 25: ...25 ...