SANGFOR IAM v2.1 User Manual
301
[Source port]: 1-65535.
[Destination IP]: Fill in the destination IP addresses. In this example, it is the FTP server IP of the
headquarters, 192.168.1.20.
[Destination IP]: Port of FTP service is 20-21.
The default configuration gives no limitation to the access privilege of VPN user.
Here you are just “defining” the LAN services. After these configurations, you have to go to
[Security] > [VPN Settings] > [User Management] to create an account (new user) and then
configure the [LAN Privilege] to complete configuring the [LAN service].
[LAN Service] can also be referred by the [IPSec Connection] > [Outbound Policy] and
[Inbound Policy] configuration. For details, please refer to Section 13.4.10 IPSec Connection.
Step 3: Under the [User Management] page, select the user Branch1 and edit this user, as shown
below: