Nokia IP40 - Satellite Unlimited - Security Appliance, Руководство пользователя

Страница: 187 / 244

Nokia IP40 Tele 8 to Check Point NG AI
Nokia IP40 Security Platform User’s Guide v1.1 187
Setting Up Nokia IP40 Tele 8
To configure a VPN tunnel between Nokia IP40 Tele 8 and Check Point FP3, on IP40 Tele 8,
(VPN client) add a VPN site.
Setting Up Check Point NG AI
Configure a VPN-1 Edge/Embedded gateway object on the Check Point Smart Dashboard.
To set up Check Point NG AI
1.
Create a gateway by using Check Point > VPN-1 Edge/Embedded gateway.
2. Create a user and add the user to the VPN users group.
3. Create a remote access VPN community.
„
Include NG AI firewall object in the participating gateway.
„
Include the Users group in the participating users.
4. In the policy editor, create a rule with the following parameters:
Source User: any
Destination: any
Through: remote access community
Target: NG AI firewall object
Note
You can also use Check Point FP3 or FP4 in place of NG AI.
Nokia Satellite X to Nokia Satellite X
(VPN Gateway to Gateway)
The VPN configuration between Nokia IP40 Satellite X and another Nokia IP40 Satellite X
enables you to establish site-to-site VPN connections between two Nokia IP40 site-to-site VPN
gateways.
Note
In this configuration, both Nokia IP40 Satellite X site-to-site VPN gateways must have a
static IP address.
Figure 8 on page 188 shows a sample implementation of the Satellite X to Satellite X solution
with three Satellite X devices. Each Nokia IP40 device acts as a Site-to-Site VPN gateway for a
fully secure network. The networks communicate through VPN connections.