Microhard Systems IPN3G, Руководство по эксплуатации

Страница: 83 / 238

© Microhard Systems Inc. 83
4.0 WebUI Configuration
Image 4-47: VPN IPsec, Site-to-Site Submenu
Add/Edit Tunnel > Tunnel Name
Enter a name for the VPN Tunnel. Up to 16 different tunnels can be
created, each requiring a unique name. The VPN tunnel name can be
comprised of 1-0, A-Z, a-
z or ‘_’. The space and dash ‘-’, are not valid
characters.
Values (chars)
tunnel1
Add/Edit Tunnel > Tunnel Status
Tunnel Status is used to Enable or Disable the current tunnel.
Values (selection)
Disable / Enable
Add/Edit Tunnel > Authentication
Select the type of Authentication. If Preshared Key is used, the same key
must be entered under IPsec Setup > Preshared Key. If X.509 is selected,
Certificate Management (Security) must be used to load the required
certificates and private keys related to X.509
Values (selection)
Preshared Key
X.509 CA
4.10.1.1 VPN > Gateway-to-Gateway
The Site to Site configuration allows the connection of two VPN devices to create a tunnel, such as a
IPn3G router at the office and a VPN capable router at a teleworker’s home. To establish a tunnel, settings
must be mirrored on the two routers. A successful connection requires that at least one router is identifiable
by a static IP address or a Server ID. If one end of the tunnel uses a dynamic IP address, the server ID can
be used to establish a connection. The two ends of the tunnel cannot be on the same subnet.
Local Setup > Local Security Gateway Type
Specify the method for identifying the router to establish the VPN tunnel.
The Local Security Gateway is on this router; the Remote Security
Gateway is on the other router. At least one of the routers must have either
a static IP address or a dynamic IP with server id to make a connection.
(Continued…)
Values (selection)
IP Only
IP + Server ID
Dynamic IP + Server ID