ETIC SIG, User Manual, Page: 22 / 83

CONFIGURATION
7 Creating VPN connections between routers
7.1 Principles
A VPN tunnel is a safe link set between two end-points routers over an IP
network : Both routers authenticate, data are encrypted and each device
of a LAN can exchange data with each device of the other one.
To get more explanations about how VPNs work, refer to appendix 1.
128 VPNs can be set on the WAN interface of the SIG router.
Two types of VPN can be set : TLS VPNs and IPSec VPNs.
IPSec has the advantage to be a standard solution.
TLS is easier to employ because the transport layer is TCP or UDP; it is
why, it can be easily used when the VPN must pass through several or
even numerous company routers.
Once a type of VPN (TLS or IPSec) has been selected, all the VPN set
with the SIG router will be of the same type.
Two steps are necessary to configure the SIG to create VPN connections
between routers :
1
st
step : Select the VPN type and set up the VPN parameters
Once a type of VPN has be selected, it applies to all the connections with remote routers.
2
nd
step : Create VPN connections
A connection can be an
incoming connection or
an outgoing connection.
If a connection is an
incoming connection, the
local router is named
“VPN server” and the
remote router is a “VPN
client”.
VPN
Outgoing
connection
Ingoing
connection
VPN
client
VPN
server
IP network
Page 22
User’s guide ref 9017409-01 SIG Router & VPN server