Configuration Examples - Page 49
IPSec over the WAN
The IPSec Tunnel will be established over the WAN in order to secure all IP traffic
between subnets. As an alternative, Frame Relay could be use instead of the dedicated
WAN link. This section is split into two parts as follows:
1. A PPP numbered WAN Link.
2. An Un-numbered PPP WAN Link.
The difference between the two highlights the use of the Tunnel Endpoints IP
Addresses. Both of these methods can be used on either the integral IP Office WAN
interface or on a T1 interface when used in a non-channalized mode.
A Numbered PPP WAN Link
Figure 22. A Numbered PPP WAN Link
Task Description
Step1
Configure the WAN link using the diagram
above and check for correct operation.
The following settings are required on the
PPP tab of the WAN Service form for both
systems.
•
Header Compression Mode =
<unselected>
•
Multilink/QoS =<unselected>
In support of numbered PPP interface
mode add the following to IP tab of the
WAN Service form.
Location A
•
IP Address = 10.10.20.1
•
IP Mask = 255.255.255.0
Location B
•
IP Address = 10.10.20.2
•
IP Mask = 255.255.255.0
The IPSec tunnel will be established over the
WAN in order secure IP traffic between the two
subnets. Hence, the WAN link must be
established before attempting security
configuration.
IPSec does not use the normal QoS facilities of
IP Office.
A PPP link that is configured and uses an IP
address, is referred to as a numbered
PPP link
The addresses used to create the numbered
PPP link will be used (later in this example) as
the IP sec tunnel endpoint address.
Step 2
Install the IPSec Licence.
Licence name = IPSec tunneling.
An IPSec Licence is required per IP Office. Make
sure the IPSec licenses are valid on both
systems.
IP Office (R3.0) Virtual Private Networking
Configuration Examples - Page 49
40DHB0002UKER Issue 3 (4th February 2005)
Part 2: VPN configuration
