13
Select
Internet Protocol (TCP/IP)
and click
Properties
(or in 95/98/Me,
TCP/IP
->
[your network card name]
if there are multiple entries) and
click
Properties
(in 95/98/Me, you may also have to click the
IP Address
tab).
Check
Obtain an IP address automatically
, check
Obtain DNS server
address automatically
and click
OK
(in 95/98/Me, reboot the PC if
prompted to do so).
You are now finished.
14
Common VPN Scenarios
Generally there are two common scenarios in which you will want to set
up your CyberGuard SG appliance(s):
•
LAN-to-LAN:
Linking two branch offices across the Internet.
For this
case we recommend using IPSec.
The VPN connection can operate
with both static and dynamic public (Internet) IP addresses.
For the example below we assume that CyberGuard SG appliances are
installed at either end, and that both have a static public IP address, or
one is static and one is dynamic. The example tunnel will be using pre-
shared keys for authentication, aggressive mode for keying, and be
established going out through the default gateway interface. Proceed to
CyberGuard SG to CyberGuard SG VPN (IPSec)
.
Please refer to the IPSec section of the User Manual if you are
trying to set up something more complex, and for a detailed
description of all available options.
•
Roaming:
Connecting to your CyberGuard SG appliance, installed at
your home or office, from a single PC at a remote location.
For this
case we recommend using PPTP
because the client is standard in
Windows and other operating systems, and it is quite simple to set up.
Proceed to
Remote Workstation to CyberGuard SG VPN (PPTP)
.
CyberGuard SG to CyberGuard SG VPN (IPSec)
Perform these steps for either end of the connection. Unless instructed
otherwise, leave all options at their default settings.
STEP 1
Enable IPSec
Select
IPSec
from the
VPN
menu.
Underneath I
PSec General Settings
select
This end has a static IP
address IPSec endpoint
, or
This end has a dynamic IP address
IPSec endpoint
as appropriate. This is referring to the public (Internet)
IP address of this CyberGuard SG appliance. Check with your ISP if
unsure.
Check
Enable IPSec
, and click
Apply
.
