Eicon Networks SHIVA 1100, Administrator'S Manual, Page: 84 / 136

IPSec
84 System Administrator’s Guide
3. Define the Local Network behind the Shiva VPN Gateway that is to have access
through the tunnel. For this example, enter 192.168.2.0 / 255.255.255.0 in the
field.
4. Define the Remote Network behind the remote party that is to have access
through the tunnel. For this example, enter 192.168.1.0 / 255.255.255.0 in the
field.
5. Click the Apply button to save the tunnel configuration.
Other options
The following options will become available on this page depending on what has been
configured previously:
A separate section may appear to enter multiple Local Networks or Remote Networks
or both. In the case where both local and remote parties have been configured to have
multiple subnets behind them.
In the Subnet Settings section, a local and remote network combination can be
added one at a time by entering subnets into the Add Local Network and Add
Remote Network fields and then clicking Apply . Configured local and remote network
combinations can be deleted by clicking the Delete checkbox for the appropriate
combination and then clicking Apply . Once the required networks have been added,
configure the Phase 2 Settings section.
Set up the head office
Enable IPSec
1 Click the IPSec link on the left side of the web-based management console.
2. Check the Enable IPSec checkbox.
3. Select the type of IPSec endpoint the Shiva VPN Gateway has on its Internet
interface. For this example, select static IP address.
4. Leave the Set the IPSec MTU to be checkbox unchecked.
5. Click the Apply button to save the changes.
Setup a tunnel to accept connections from the branch office
1 Click the IPSec link on the left side of the web-based management console.
2. Click the Add New Tunnel tab. Many of the settings such as the Preshared
Secret, Phase 1 and 2 Proposals and Key Lifetimes will be the same as the
branch office.