Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 406 / 861

405 Providing remote access using VPN tunnels
Multicast traffic through gateway-to-gateway IPsec tunnels
To configure multicast traffic
You must configure both security gateways and gateway-to-gateway tunnels between them.
To configure security gateway 1
1
Create a security gateway network entity for eth1, and then do the following:
■
For the address type, select interface.
■
For the address, select outside.
2 Create a security gateway network entity for the remote security gateway.
For this example, for address type, select IP address and use 10.10.20.1 as the IP address.
3 Create a host network entity using 10.10.10.1 as the address.
4 Create a host network entity using 10.10.20.1 as the address.
5 Create a gateway-to-gateway VPN tunnel and use the 10.10.10.1 host entity as the local endpoint,
and then do the following:
■
Use the 10.10.20.1 host entity as the remote endpoint.
■
Use the security gateway network entity for eth1 as the local gateway.
■
Use the security gateway network entity for the remote security gateway as the remote
gateway.
You may configure an appropriate VPN policy for use with this VPN tunnel.
To create a gateway-to-gateway tunnel for the subnets
1 Create a subnet network entity for 10.10.10.1.
2 Create a subnet network entity for 10.10.20.1.
3 Create a gateway-to-gateway VPN tunnel, and for the local endpoint, use the 10.10.10.1 subnet
entity, and then do the following:
■
Use the 10.10.20.1 subnet entity as the remote endpoint.
■
Use the security gateway network entity for eth1 as the local gateway.
■
Use the security gateway network entity for the remote security gateway as the remote
gateway.
You may configure an appropriate VPN policy for use with this VPN tunnel.
To configure security gateway 2
1 Create a security gateway network entity for eth1, and then do the following:
■
For the address type, select interface.
■
For the address, select outside.
2 Create a security gateway network entity for the remote security gateway.
For this example, for address type, select IP address and use 10.10.10.1 as the IP address.
3 Create a host network entity using 10.10.10.1 as the address.
4 Create a host network entity using 10.10.20.1 as the address.
5
Create a gateway-to-gateway VPN tunnel and use the 10.10.20.1 host entity as the local endpoint,
and then do the following:
■
Use the 10.10.10.1 host entity as the remote endpoint.
■
Use the security gateway network entity for eth1 as the local gateway.
■
Use the security gateway network entity for the remote security gateway as the remote
gateway.
You may configure an appropriate VPN policy for use with this VPN tunnel.