Modbus
Cellular
Gateway
Index
skipping
is
used
to
reserve
slots
for
new
function
insertion,
when
required.
305
also
import
the
certificates
of
the
root
CA
of
the
Gateway
1
into
the
Gateway
2
as
the
trusted
ones.
(Please
also
refer
to
following
two
sub
‐
sections)
Establish
an
IPSec
VPN
tunnel
with
IKE
and
X.509
protocols
by
starting
from
either
peer,
so
that
all
client
hosts
in
these
both
subnets
can
communicate
with
each
other.
Parameter
Setup
Example
For
Network
‐
A
at
HQ
Following
tables
list
the
parameter
configuration
as
an
example
for
the
"My
Certificates"
function
used
in
the
user
authentication
of
IPSec
VPN
tunnel
establishing,
as
shown
in
above
diagram.
The
configuration
example
must
be
combined
with
the
ones
in
following
two
sections
to
complete
the
whole
user
scenario.
Use
default
value
for
those
parameters
that
are
not
mentioned
in
the
tables.
Configuration
Path
[My
Certificates]
‐
[Root
CA
Certificate
Configuration]
Name
HQRootCA
Key
Key
Type:
RSA
Key
Length:
1024
‐
bits
Subject
Name
Country(C):
TW
State(ST):
Taiwan
Location(L):
Tainan
Organization(O):
AMITHQ
Organization
Unit(OU):
HQRD
Common
Name(CN):
HQRootCA
E
‐
mail:
Configuration
Path
[My
Certificates]
‐
[Local
Certificate
Configuration]
Name
HQCRT
Self
‐
signed:
■
Key
Key
Type:
RSA
Key
Length:
1024
‐
bits
Subject
Name
Country(C):
TW
State(ST):
Taiwan
Location(L):
Tainan
Organization(O):
AMITHQ
Organization
Unit(OU):
HQRD
Common
Name(CN):
HQCRT
E
‐
mail:
Configuration
Path
[IPSec]
‐
[Configuration]
IPSec
■
Enable
Configuration
Path
[IPSec]
‐
[Tunnel
Configuration]
Tunnel
■
Enable
Tunnel
Name
s2s
‐
101
Interface
WAN
1
Tunnel
Scenario
Site
to
Site
Operation
Mode
Always
on
Configuration
Path
[IPSec]
‐
[Local
&
Remote
Configuration]
Local
Subnet
10.0.76.0
Local
Netmask
255.255.255.0
Full
Tunnel
Disable
Remote
Subnet
10.0.75.0
Remote
Netmask
255.255.255.0
Remote
Gateway
118.18.81.33
