Nokia IP40 - Satellite Unlimited - Security Appliance, Руководство пользователя

Страница: 212 / 244

15
Using Managed Services
212 Nokia IP40 Security Platform User’s Guide v1.1
„
Specify the IP address of Check Point LSM, and click Next.
„
Type the Gateway ID and registration key as defined in VPN-1 Edge/Embedded ROBO
gateway, and click Next to continue.
„
After successful connection, the Confirmation window appears giving a list of services to
which you have subscribed.
2. Open http://my.firewall and verify the following before you proceed:
a. That Enterprise site was added to the VPN site page.
b. That the LSM profile object certificate was synchronized to the device.
c. Topology was loaded to the device. This should be verified from
http://my.firewall/vpntopo.html.
3. You can verify that the tunnel is open by sending packets from IP40 to the VPN-1 gateway.
To configure NG AI and Nokia IP40 Security Platform for site-to-site by using LSM
profiles on
Check Point
1. Enable LSM: in the command prompt, type LSMenabler on, and reset the FW services.
2. Open SmartDashboard and define a new VPN-1 edge embedded ROBO profile.
3. Name the LSM profile, and click OK.
4. Click Save on SmartDashboard and close.Open SmartLSM.
5. Define a new VPN-1 edge embedded gateway, and select the LSM profile you defined.
Make sure to choose the correct HA type (IP40).
6. Open SD again, and define a Star Community.
Place VPN-1 GW in the Central Gateway, and the LSM profile in the Satellite Gateway.
7. Define a new UDP service on ports to 9281-9282, and name it SW.
8. Place the SW service in the excluded services of the Star Community you defined.
9. Create the rule base, or policy used for managing your device.
10. Install the policy.