Chapter 6 - Basic Configuration Guide
22
Chapter 6 - Basic Configuration Guide
This chapter briefly discusses the major parameters that must be set in order to use the
IntraPort Enterprise-2 VPN Access Server.
Detailed information on the meaning of the server’s parameters is provided in the Compati-
View Management Software Reference Guide and the Text-Based Configuration and Command
Line Management Reference Guide. You should use this list as a starting point to look up more
specific information in the other documents.
There are a number of parameter settings which are optional, in the sense that they are not
required for all installations. These settings are not covered in this chapter.
In this chapter:
CV = CompatiView
TB = Text-Based Configuration
v
Note:
This Basic Configuration Guide does not include information on setting up packet
filters. See the CompatiView Management Software Reference Guide or Text-Based Config-
uration and Command Line Management Reference Guide regarding IP, IPX and AppleTalk
packet filters for more information.
The IntraPort Enterprise-2 can be set up in two different ways. One is to configure it using both
Ethernet ports to operate in parallel with your existing firewall and serve as the IPSec compo-
nent of your security system. In this setup, Ethernet 0:0 serves as an IP, IPX and AppleTalk
router port, while Ethernet 1:0 receives and sends only IPSec packets. The other option is to
set up the server behind your firewall using Ethernet 0:0 only.
Ethernet Interface Configuration
IP Settings for Dual-Ethernet Setups
If setting up the IntraPort 2/2+ in parallel with a firewall, you need to set some basic IP param-
eters for the two Ethernet interfaces.
•
IP address (default = 198.41.12.1)
•
IP subnet mask (default = 255.255.255.0)
•
IP broadcast address (default = 198.41.12.255)
•
RIP 1, RIP 2, OSPF (Open Shortest Path First), or BGP (Border Gateway Protocol)
for Ethernet 0:0 only
•
IPSec Gateway which is the equivalent of a default gateway for the IPSec interface
(Ethernet 1:0)
CV: Use the TCP/IP Routing: Ethernet 0:0 Dialog Box to set the IP address, subnet mask,
broadcast address and IP routing protocol for Ethernet 0:0. To set parameters for OSPF
or BGP, refer to the CompatiView Management Software Reference Guide.
Use the IP Connection Dialog Box to set address parameters for Ethernet 1:0. Ethernet
1:0 does not have any other settings available because it only handles IPSec traffic and
does not do routing.
Use the IPSec Gateway Dialog Box (under Global/IPSec Gateway) to set the IPSec
Gateway address. The IPSec Gateway must be on the same IP network as Ethernet 1:0.
TB: Use
the
configure command and set the IPAddress, SubnetMask and IPBroadcast
keywords, and either the RIPVersion keyword or the OSPFEnabled keyword, in the
IP Ethernet 0:0 section. To set additional parameters for OSPF or to configure BGP,
refer to the Text-Based Configuration and Command Line Management Reference
Guide.
