Nokia Network Voyager, Reference Manual, Page: 394 / 700

7
Configuring Traffic Management
396 Voyager Reference Guide
!
Hosts in the 10.1.1.0 network (the remote encryption domain) use a VPN
tunnel to access the local network connected to the internal router.
! The VPN tunnel end points are the external cluster IP address and the
external address of the remote router.
Note
If you configure a tunnel between two IPSO clusters, the end points
should be the external cluster IP addresses of both clusters.
Here is are the steps you would perform to configure the tunnel:
1.
Follow the steps under “Configuring the Cluster in Voyager.”
2.
Log into the cluster using Cluster Voyager.
3.
In the Add New VPN Tunnel section of the Clustering Setup
Configuration page, enter 10.1.1.0 in the
N
ETWORK
A
DDRESS
field.
4.
In the
M
ASK
field, enter 24.
5. In the T
UNNEL
E
ND
P
OINT
field, enter 10.1.2.5.
The end point that you configure here is the IP address on the remote
router. If the other end of the tunnel is also an IPSO cluster, this address
would be the external cluster IP address of the other cluster.
6. Click A
PPLY
.
7. Click S
AVE
.
8.
Configure the same tunnel in VPN-1/FireWall-1.
For more information, see “Configuring VPN-1/FireWall-1 for Clustering”
and the Check Point documentation.
Redundant Topology Examples
If a cluster’s connection to a network is a single switch or hub and that device
fails, the cluster dissolves itself and does not forward any traffic through any
of its interfaces. For example, refer to the following diagram. If the switch