Nortel BCM 3.7, Manual

Page: 27 / 1004

Contents 27
Programming Operations Guide
Modifying a Destination Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 763
Deleting a Destination Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764
Deleting a PPTP tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 764
IPSec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 765
Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 766
Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
Encryption method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
Authentication method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 767
IPSec capacity restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
Settings required for IPSec tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
NAT (Network Address Translation) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768
Dialup ISDN connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 769
Compatibility with Contivity Extranet Switch and Shasta 5000 . . . . . . . . . . . 769
IPSec and PPTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 769
Multiple IP Address restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 769
Firewall rules for IPSec Branch Office and Remote User Tunnels . . . . . . . . 769
Changing the IPSec global settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 773
IPSec Branch Office configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774
Adding a Branch Office IPSec Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 774
Adding Local Accessible Networks to the Branch Office IPSec tunnel . . . . . 777
Adding Remote Accessible Networks to the Branch Office IPSec tunnel . . . 777
Sending all traffic from Local Accessible Networks through the IPSec tunnel 778
Modifying a Branch Office IPSec Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 779
Modifying Local Accessible Networks to the Branch Office IPSec tunnel . . . 779
Modifying Remote Accessible Networks to the Branch Office IPSec tunnel . 779
Deleting a Branch Office IPSec tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 780
Deleting Local Accessible Networks to the Branch Office IPSec tunnel . . . . 780
Deleting Remote Accessible Networks to the Branch Office IPSec tunnel . . 780
Creating a tunnel between two Business Communications Managers . . . . . . . . 781
Configuring the first Business Communications Manager . . . . . . . . . . . . . . 781
Configuring the second Business Communications Manager . . . . . . . . . . . 781
Creating a tunnel between a Business Communications Manager and a Contivity Extranet
Switch v02_61 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 782
Configuring the Business Communications Manager . . . . . . . . . . . . . . . . . . 782
Configuring the Contivity Extranet Switch . . . . . . . . . . . . . . . . . . . . . . . . . . 782
Configuring the Business Communications Manager . . . . . . . . . . . . . . . . . . 783
Configuring the Contivity Extranet Switch . . . . . . . . . . . . . . . . . . . . . . . . . . 783
IPSec Remote User configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784
IPSec Remote User Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784
Split Tunneling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 784
Adding a Remote User IPSec Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 786
Assigning an IP Address to a Remote User Account . . . . . . . . . . . . . . . . . . 786
Adding a Remote IP Address Pool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 787