Nokia IP30 - Satellite Plus - Security Appliance, User Manual

Page: 104 / 164

4
VPN Configuration
104 Nokia IP30 User Guide
3. Configure VPN central gateway as the FP3 firewall object.
4. Configure Safe@gateway as Satellite gateway.
5. In the VPN properties, select 3DES and SHA1.
6. Define access rules with the following:
Source: Any
Destination: Any
If Via: Remote Access
Action: Accept
Install On: FP3 firewall object
Setting up IP30 Satellite
Configure the IP30 Satellite for VPN connection with SmartCenter
FP3.
1.
Specify the IP address of IP30 Satellite on the VPN-1 server.
2. Enter the Shared Secret (a password that is known to both the
IP30 Satellite and the VPN-1 Server).
IP30 Satellite in NAT and No-NAT Modes
VPN configuration allows you to choose how your VPN should
function. Use of NAT and No-NAT modes offers great flexibility.
No-NAT is the default mode of operation, in which the protected
networks at each site are known and predefined.
NAT mode allows you to define VPNs at peer gateway sites without
knowing the protected network behind the IP30 devices.
To access a resource that is protected by a VPN in NAT mode, you
must contact the hiding (Internet) address of the VPN gateway.
Your request is then forwarded to the correct computer in the
protected network according to the defined security rules.