724-746-5500 | blackbox.com
Page 95
Chapter 8: Virtual Private Networks
WRT4001A
PC 1
PC 2
LAN
(1.1.1.x)
1.1.1.1
2.2.2.1
DSL
modem
User x
(PC)
Tunnel
over IP
Internet
(IP Network)
Figure 8-17. WRT4000 Series Cellular Wireless Router Terminating Tunnel from VPN Client.
Table 8-9 lists sample parameters to support tunnel termination for a remote VPN user.
Table 8-2. Sample Remote User Record.
Field
Sample Value
Peer ID (Remote User ID)
a1234@
blackbox.com
Preshared Key
***********
Profile Group
1,2,4,5
NOTE: The choices for profile group can include up to four VPN profiles. The
WRT4000 Series Cellular Wireless Router chooses the first profile that the peer
ID matches.
One of the profile-group choices can be a wildcard—any profile listed in the
VPN profile database. You may list VPN profiles before a wildcard, but there is
no need to list any profiles after a wildcard.
Certificate
***********
NOTE: The remote user’s IP address does not need to be known in advance.
8.3.2.3 Tunnel Passthrough
Tunnel passthrough is used when a remote or local VPN user sends IPsecencapsulated packets to the WRT4000 Series Cellular
Wireless Router. In passthrough mode, the originating device sets up the VPN tunnel, so the originating device is the VPN
endpoint, and the WRT4000 Series Cellular Wireless Router is merely a gateway. The WRT4000 Series Cellular Wireless Router
gateway uses its VPN policy to provide transparent forwarding of the VPN endpoint’s IP packets.
Tunnel passthrough occurs most often when packets are received from a VPN client. If a remote user is using VPN client software,
the client sets up a VPN tunnel through the WRT4000 Series Cellular Wireless Router to a remote network. In this case, the
WRT4000 Series Cellular Wireless Router does not initiate a new VPN tunnel; it uses passthrough mode to carry the tunnel creat-
ed by the VPN client (which is the VPN endpoint in this scenario).
Содержание WRT4000-ANT
Страница 141: ...724 746 5500 blackbox com Page 141 NOTES...
Страница 142: ...724 746 5500 blackbox com Page 142 NOTES...
Страница 143: ...724 746 5500 blackbox com Page 143 NOTES...