Proscend 6200-2W, Руководство пользователя

Страница: 69 / 93

66
Configuring PPTP VPN in the Head Office
The IP address 192.168.1.254 will be assigned to the router located in the branch office. Please make sure this IP is not
used in the head office LAN.
Configuring PPTP VPN in the Branch Office
The IP address 69.1.121.33 is the Public IP address of the router located in head office. If you registered the DDNS
(please refer to the DDNS section of this manual), you can also use the domain name instead of the IP address to
reach the router.
VPN Configuration
VPN Endpoint address
Each VPN endpoint must be configured to initiate or accept connections to the remote VPN client gateway. Usually,
this requires having a fixed Internet IP address. However, it possible for a VPN gateway to accept incoming connections
from a possible for remote client where the client’s IP address is not known in advance.
If connecting 2 LANs, this requires that:
Each endpoint must be aware of the IP address used on the other endpoint.
The 2 LANs must use different IP address ranges.
VPN Pass-through
Here, a PC on the LAN behind the VPN router is using VPN software, but the VPN router is not acting as CPN endpoint,
It is only allowing the VPN connection.
The PC software can use any VPN protocol supported by the remote VPN.
The remote VPN server must support client PCs which are behind a NAT router, and so have an IP address which is not
valid on the Internet.
The VPN router requires no VPN configuration, since it is not acting as a VPN endpoint.
Client PC to VPN Gateway
Here, the PC must run appropriate VPN client software in order to connect, via the Internet to VPN router. Once
connected, the client PC has same access to LAN resources as PCs on the local LAN.
Connecting 2 VPN gateways
This allows two LANs to be connected PCs on each endpoint gain secure access to the remote LAN.
The 2 LANs must use different IP address ranges.
The VPN policies at each end determine when a VPN tunnel will be established, and what system on the remote LAN
can be accessed once the VPN connection is established.
It is possible to have simultaneous VPN connections to many remote sites.