HoB HOBLink, Administration Manual

Page: 58 / 83

Configuring HOBLink VPN Gateway HOBLink VPN Gateway
58 Security Solutions by HOB
List of VPN Rules
Here you configure the rules to be used with the VPN. The buttons below this list of
configured VPN rules have the following functions:
Use the arrow buttons to manage the order in which the VPN rules appear in this
list. The entry fields for the
VPN Rules interface are as follows:
Name – enter the name of the VPN rule to be added to your network. This is a
required field.
Enabled – check this box to enable the rule. This is enabled by default
Description – enter a description of the rule to help identification and management
of the peer and management of the VPN connection.
Source – select the source of an IP packet or peer name. You can select the name
of a network object of type
SUBNET
,
WORKSTATION
or
GROUP
(but not
GATEWAY
as
it is not a valid source), or a user name or a user group name as the source. The
initial text shown here of
Select source
is used in this field only to indicate that
it is necessary to select a valid source to configure a valid rule.
Destination – the destination for an IP packet or peer name. You can select a user
name or a user group name, or the name of a network object (of type
SUBNET
,
WORKSTATION
or
GROUP
only). A network object of type
GATEWAY
has a public IP
address and so cannot be used as a valid destination. The initial text shown here of
Select destination
is used in this field only to indicate that it is necessary to
select a valid destination to configure a valid rule.
Service – select the name of an IP service or group of services determining the
functionality of the previously specified tunnel (see Section 5.4 Service on page 34 ).
The default is
Any
.
Bidirectional – enable to allow this rule to be valid for both directions. This is
disabled by default.
Action – select the way to process the packets. The supported options are
IPsec
(default) and
IPsec/L2TP
. If Source or Destination contain either a user or user
group, then select
IPsec/L2TP
when the Use of virtual IP address of the
corresponding user or user group peer is set to
L2TP/PPP Adapter
.
IPsec Scheme – select from the dropdown box the name of the IPsec scheme to
use in this rule. This field is only shown when Action is
IPsec
.
Logging – select the type of events you want to register in the log. The supported
options are
None
(default),
All
or
Errors
.
Queueing Priority (1...5) – here you set the priority of packets (specified in the rule
parameters) in the tunnel. It can be beneficial to define the priority to assure a level
of QoS (Quality of Service) for some services if there are several types of packets
click New to create a new entry in the list of VPN rules. You will then be
prompted to enter a name as an identifier for this new rule.
click
Clone to clone the selected rule. The clone must be given a new
name to avoid future conflicts.
click
Remove to remove the selected rule from the list.