Nortel BCM 3.7, Manual

Page: 787 / 1004

IPSec 787
Programming Operations Guide
Dynamic IP address from an IP Address Pool
To assign a dynamic IP address, you must configure a Remote IP Address Pool and assign the
Remote IP Address Pool to the Remote User Account. For information about how to configure a
Remote IP Address Pool, refer to
“Adding a Remote IP Address Pool” on page 787 . To assign the
Remote IP Address Pool to the Remote User Account, you must configure the IP Address Pool
Name option when you configure the Remote User Account settings.
Adding a Remote User IPSec Tunnel involves the following:
• “Adding a Remote IP Address Pool” on page 787
• “Adding Remote User Accounts” on page 789
• “Configuring Remote User Accounts” on page 791
Adding a Remote IP Address Pool
Remote access users who are using tunneling protocols require two IP addresses to form packets.
The addresses are normally referred to as outer and inner addresses. The outer address, or public
address, is visible when packets are traveling through the public data networks (PDNs). This
address is negotiated between the client and the ISP to which it is connected. Business
Communications Manager does not have control of this address.
The inner IP address is the one that eventually appears on the private network when the outer
layers of the packet are removed. Therefore, this address must lie within the private network
address space. Business Communications Manager provides the remote user with the inner IP
address during tunnel setup. This address can come from a defined static IP address for this user
account or from an internal address pool.
When assigning IP addresses for remote users, make sure that no conflicts can occur with IP
addresses already assigned on the private network.
1
On the navigation tree, click the Services key and click the VPN key.
2 Click the IPSec key and click the Remote User Accounts heading.
The Remote IP Address Pool List screen appears.
3 On the Configuration menu, click Add IP Address Pool .
The Remote IP Address Pool List screen appears.
Note: You must configure either the IP Address Pool Name option or the Static IP
Address and Static Subnet Mask options.
Note: When assigning IP addresses for Remote users, make sure that no conflicts can
occur with IP Addresses already assigned on the private network. If the private network
contains a DHCP server, the range assigned in the IP Address Pool or the Static IP
Address must be excluded from the DHCP IP address range.