RACOM MG102i, Руководство по эксплуатации

Страница: 96 / 175

When creating Security Associations, IPsec keeps track of routed networks within the tunnel. Packets
are only transmitted when a valid SA with the matching source and destination network is present.
Therefore, you may need to specify the networks behind the endpoints by applying the following settings:
Local network address: The address of your Local Area Network (LAN)
Local network mask: The netmask of your LAN
Peer network address: The address of the remote network behind the peer
Peer network mask: The netmask of the remote network behind the peer
NAT address: Optionally, you can apply NAT (masquerading) for packets coming
from a different local network. The NAT address must reside in the
network previously specified as the local network.
Note
Since the firmware 3.7.40.103, the maximum number of networks for individual IPsec tunnels
has increased from 4 to 10.
Note
See the IPsec configuration example
2
in our Application notes.
7.5.3. PPTP
The Point-to-Point Tunneling Protocol (PPTP) is a method for implementing virtual private networks
between two hosts. PPTP is easy to configure and widely deployed amongst Microsoft Dial-up networking
servers. However, due to its weak encryption algorithms, it is nowadays considered insecure but it still
provides a straightforward way for establishing tunnels. When setting up a PPTP tunnel, you would
need to choose between server or client.
2
http://www.racom.eu/eng/products/m/midge/app/vpn/IPsec.html
MG102iGPRS/UMTS/HSPA+/LTE router – © RACOM s.r.o. 96
Web Configuration