Page 152 SonicWALL TELE3 SP Administrator’s Guide
Groups 1, 2, and 5 use Modular-Exponentiation with different prime lengths as listed below:
If network connection speed is an issue, select
Group 1
. If network security is an issue, select
Group 5
. To compromise between speed and security, select
Group 2
.
Default LAN Gateway
A
Default LAN Gateway
is used at a central site in conjunction with a remote site using the
Route all internet traffic through this SA
check box. The
Default LAN Gateway
field
allows the network administrator to specify the IP address of the default LAN route for incoming
IPSec packets for this SA.
Incoming packets are decoded by the SonicWALL and compared to static routes configured in
the SonicWALL. Since packets can have any IP address destination, it is impossible to configure
enough static routes to handle the traffic. For packets received via an IPSec tunnel, the
SonicWALL looks up a route for the LAN network. If no route is found, the SonicWALL checks
for a
Default LAN Gateway.
If a
Default LAN Gateway
is detected, the packet is routed
through the gateway. Otherwise, the packet is dropped.
Testing a VPN Tunnel Connection Using PING
To verify that your VPN tunnel is working properly, it is necessary to ping the IP address of a
computer on the remote network. By pinging the remote network, you send data packets to
the remote network and the remote network replies that it has received the data packets. Your
administrator supplies the remote IP address that you can use for testing. The following steps
explain how to ping a remote IP address.
1. Locate the
Windows Start
button in the lower left hand corner of the desktop operating
system. Click
Start
, then
Run
, and then type
Command
in the
Open filepath
box. A
DOS window opens to the C:>\ prompt.
2. Type
ping
, then the IP address of the host computer. Press
Enter
to begin the data
communication.
3. A successful ping communication returns data packet information to you. An unsuccessful
ping returns a message of
Request Timed Out
.
Group
Descriptor
Prime Size
(bits)
1
768
2
1024
5
1536
