Nortel BCM 3.7, Manual

Page: 782 / 1004

782 IPSec
N0008589 3.3
Creating a tunnel between a Business Communications Manager
and a Contivity Extranet Switch v02_61
The following are an examples of a how to connect a Business Communications Manager to a
Contivity Extranet Switch using an IPSec tunnel.
In this example, the IPSec tunnel connects a Business Communications Manager with a LAN 2 IP
address of 47.81.20.50 and a Contivity Extranet Switch with a Public IP address of 47.82.30.60.
LAN 1 on the Business Communications Manager is on the subnet 10.10.11.0. The Contivity
Extranet Private LAN is on the subnet 14.14.14.0.
Configuring the Business Communications Manager
1
Set the Local Endpoint to 47.81.20.50 .
2 Set the Remote Endpoint to 47.82.30.60 .
3
Set the Preshared Key to 123 .
4 Set the Key Type to Text .
5
Set the Local Accessible Networks to 10.10.11.0 with mask 255.255.255.0 .
6 Set the Remote Accessible Networks to 14.14.14.0 with mask 255.255.255.0 .
Configuring the Contivity Extranet Switch
1 Go to Profiles->Network and create a Network with the IP address 14.14.14.0 with mask
255.255.255.0. You will use this for the Local Accessible Networks for your Branch Office
Connection.
2
Under Profiles->Branch Office, create a Group based on the Base class.
3 In the IPSec section of this new Group, change the Vendor ID to Disabled and change
Compression to Disabled. Business Communications Manager does not support Vendor ID or
Compression.
4 In the Connectivity section of this new group, change the Nailed Up setting to Disabled.
Business Communications Manager does not support the Nailed Up functionality.
5
Select Define Branch Office Connection.
6 Set the routing type to be Static.
7 Set the Local Endpoint to 47.82.30.60 and the Remote Endpoint to 47.82.20.50.
8 Under Local Accessible Networks, select the Network that was created earlier.
9 Set the Remote Accessible Networks to 10.10.11.0 with mask 255.255.255.0.
10 For the Preshared Key, select the Text button and set the key to '123'. This must match the
BCM key.
11 Mark the box for Enable Branch Office Connection.