background image

 

1. Firewall A - Addresses 

Go to 

Objects -> Address book -> InterfaceAddresses.

 

Edit the following items: 
Change 

lan_ip

 to 

192.168.1.1

 

Change 

lannet

 to 

192.168.1.0/24

 

 
Change 

wan1_ip

 to 

192.168.110.1

 

Change 

wan1net

 to 

192.168.110.0/24 

 

Go to 

Objects -> Address book.

 

 
Add a new 

Address Folder

 called 

RemoteHosts

 
In the new folder, add a new 

IP address

Name

fwB-remotenet 

IP Address

192.168.2.0/24 

 

Click 

Ok 

 

In the same folder, add a new 

IP address

Name

fwB-remotegw 

IP Address

192.168.110.2 

 

Click 

Ok 

 

2. Firewall A – Pre-shared keys 

Go to 

Objects -> Authentication Objects

 

 
Add a new 

Pre-Shared Key

 

General: 

 

Name: 

fwB-psk 

 

Summary of Contents for NetDefend Firewall Series

Page 1: ...cked expanded and then Address Book Most of the examples in this document are adapted for the DFL 800 The same settings can easily be used for all other models in the series The only difference is the names of the interfaces Since the DFL 1600 and DFL 2500 has more than one lan interface the lan interfaces are named lan1 lan2 and lan3 not just lan The screenshots in this document is from firmware ...

Page 2: ...How to configure IPSec VPN LAN to LAN Tunnel Create one lan to lan IPsec VPN tunnel between firewall A and B ...

Page 3: ...wan1net to 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP address Name fwB remotenet IP Address 192 168 2 0 24 Click Ok In the same folder add a new IP address Name fwB remotegw IP Address 192 168 110 2 Click Ok 2 Firewall A Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwB psk ...

Page 4: ... shared secret Click Ok 3 Firewall A IPsec interface Go to Interfaces IPsec Add a new IPsec Tunnel In the General tab General Name fwB ipsec Local Network lannet Remote Network fwB remotenet Remote Endpoint fwB remotegw Encapsulation Mode Tunnel ...

Page 5: ...ec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwB psk Click Ok 4 Firewall A Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwB ipsec In the new folder create a new IP Rule In the General tab General ...

Page 6: ...tion Interface fwB ipsec Destination Network fwB remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwB ipsec Source Network fwB remotenet Destination Interface lan Destination Network lannet Click Ok ...

Page 7: ...o 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP4 address Name fwA remotenet IP Address 192 168 1 0 24 Click Ok In the same folder add a new IP4 address Name fwA remotegw IP Address 192 168 110 1 Click Ok 6 Firewall B Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwA psk Shared secr...

Page 8: ...Endpoint fwA remotegw Encapsulation Mode Tunnel Algorithms IKE Algorithms High IKE Life Time 28800 IPsec Algorithms High IPsec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwA psk Click Ok 8 Firewall B Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwA ipsec In the new folder create a new IP Rule ...

Page 9: ...ce fwA ipsec Destination Network fwA remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwA ipsec Source Network fwA remotenet Destination Interface lan Destination Network lannet Click Ok Save and activate the configuration on firewall B ...

Reviews: