Cyclades AlterPath OnBoard, Руководство администратора

Страница: 400 / 460

Understanding Address Configuration for Connected Devices
364 AlterPath OnBoard Administrator’s Guide
The authorized user must do the following to enable the IPSec client running
on the user’s workstation to bring up the VPN tunnel to access the subnets
where the devices reside, and then to access the native IP features on the
devices.
• Use the same values used by the OnBoard administrator to create an
IPSec VPN connection profile on the user’s workstation.
If the OnBoard administrator sends the relevant portions of the
ipsec.conf
file from the OnBoard’s IPSec configuration, use it to
replace the same section in the workstation’s
ipsec.conf
file.
• Bring up the IPSec VPN tunnel. For accessing “sp1,” “sp2,” or “sp3,” the
user can use the connVirt connection profile. For accessing “sp4”, the user
uses the “connSub2” connection profile.
Enabling native IP and accessing the device’s native features is the same as
described under “Enabling Native IP and Accessing a Device’s Native
Features Using Real IP Addresses for Example 2” on page 355.
PPTP VPN Configuration for Example 3
After the private subnets, device, and user account configuration in “Virtual
Network and Device Configuration for Example 3” on page 360 is completed,
a VPN connection profile must be defined to create a VPN tunnel to the
virtual network.
The steps used for enabling a PPTP VPN connection to the virtual network are
the same as in “PPTP VPN Configuration for Example 2” on page 352, except
that, after creating the PPTP VPN tunnel, the user must create the static route
differently to access the virtual network.
This first set of bullets are a review of the steps for obtaining the PPTP
address assigned to the OnBoard:
• Enter the
ifconfig
or
ipconfig
command on the command line of
the user’s workstation to discover the IP address assigned to the
OnBoard’s end of the PPTP VPN tunnel.
• Enter the OnBoard’s PPTP-assigned address either in a browser or with
ssh
on the command line to access the OnBoard. In this example the
address is
192.168.2.1
.