•
Local Network: If3_net
•
Outer Interface Filter: my_ipsec_tunnel
•
Server IP: If2_ip
3.
Click OK
B. Next, enable transparent mode on the protected interface
If3
:
1.
Go to: Network > Interfaces and VPN > Ethernet
2.
Select the If3 interface
3.
Select the option Enable transparent mode
4.
Click OK
Setup With VLANs
The NetDefendOS L2TPv3 server can handle VLAN tagged Ethernet frames so that a protected
internal network can be accessed by external clients over VLAN connections.
To do this with NetDefendOS, a pair of VLANs need to be configured, both with the same VLAN
ID as the ID used by the clients. One VLAN is configured on the local, protected Ethernet
interface. The other VLAN is configured on the L2TPv3 server interface. Both of these VLANs must
have transparent mode enabled. In addition, a new routing table must be defined for each pair
and each VLAN in the pair is made a member of that table.
Here is a summary of the setup steps for VLAN:
A. Define an L2TPv3 server interface object as described previously but do not enable
transparent mode on the protected Ethernet interface.
B. Set up a NetDefendOS
VLAN
interface object with the following properties:
i.
The VLAN ID is the same as the VLAN ID of packets sent by clients.
ii.
The interface is the protected Ethernet interface.
iii.
The network is the same as the protected local network.
iv.
The IPv4 address for the VLAN is any arbitrary IP from the protected local network.
v.
Transparent mode for this VLAN is enabled.
C. Set up a second
VLAN
interface object with the following properties:
i.
The VLAN ID is the same as the previous VLAN and the same as the ID of packets sent by
clients.
ii.
The interface is the
L2TPv3 Server
object defined previously.
iii.
The network is the same as the protected local network.
iv.
The IPv4 address for the VLAN is any arbitrary IP from the protected local network but
different from the previous VLAN.
Chapter 9: VPN
745
Содержание NetDefendOS
Страница 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Страница 32: ...Chapter 1 NetDefendOS Overview 32 ...
Страница 144: ...Chapter 2 Management and Maintenance 144 ...
Страница 220: ... Enable DHCP passthrough Enable L2 passthrough for non IP protocols 4 Click OK Chapter 3 Fundamentals 220 ...
Страница 267: ... SourceNetwork lannet DestinationInterface any DestinationNetwork all nets 4 Click OK Chapter 3 Fundamentals 267 ...
Страница 284: ...Chapter 3 Fundamentals 284 ...
Страница 360: ...The ospf command options are fully described in the separate NetDefendOS CLI Reference Guide Chapter 4 Routing 360 ...
Страница 392: ...Chapter 4 Routing 392 ...
Страница 396: ...Web Interface 1 Go to Network Ethernet If1 2 Select Enable DHCP 3 Click OK Chapter 5 DHCP Services 396 ...
Страница 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Страница 420: ...Chapter 5 DHCP Services 420 ...
Страница 424: ...2 Now enter Name lan_Access Action Expect Interface lan Network lannet 3 Click OK Chapter 6 Security Mechanisms 424 ...
Страница 573: ...Chapter 6 Security Mechanisms 573 ...
Страница 575: ...This section describes and provides examples of configuring NAT and SAT rules Chapter 7 Address Translation 575 ...
Страница 607: ...Chapter 7 Address Translation 607 ...
Страница 666: ...Chapter 8 User Authentication 666 ...
Страница 775: ...Chapter 9 VPN 775 ...
Страница 819: ...Chapter 10 Traffic Management 819 ...
Страница 842: ...Chapter 11 High Availability 842 ...
Страница 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Страница 879: ...Chapter 13 Advanced Settings 879 ...