SonicWALL TELE3 SP, Руководство администратора

Страница: 138 / 210

SonicWALL VPN Page 137
• WAN subnet mask - 255.255.255.248
To configure the main office PRO 300, use the following steps:
1. Configure the network settings for the firewall using the Network tab located in the
General section.
2. Click Update and restart the SonicWALL if necessary.
3. Click VPN , then the Configure tab.
4. Create a name for the main office SA, for example, Main Office .
5. Type in the branch office WAN IP address for the IPSec Gateway Address .
6. Create an Incoming SPI using alphanumeric characters.
7. Create an Outgoing SPI using alphanumeric characters.
8. Select Strong Encrypt (ESP 3DES) as the Encryption Method .
9. Write the Encryption Key down or use cut and paste to copy it to a Notepad window.
10. Click Add New Network . Type the IP address, “192.168.22.1” in the Range Start field.
Type the IP address, “192.168.22.254” in the Range End field. This Range End value is
appropriate even if NetBIOS broadcast support is enabled. Leave the subnet mask field
blank. Click
Update .
11. Click Advanced Settings and select the features that apply to the SA.
• Enable Windows Networking (NetBIOS) broadcast - if the remote clients use
Windows Network Neighborhood to browse remote networks.
• Apply NAT and firewall rules - to apply NAT and firewall rules to the SA or just firewall
rules if in Standard mode.
• Route all internet traffic through this SA - if forcing Internet traffic from the WAN to
use this SA to access a remote site.
• Default LAN Gateway if specifying the IP address of the default LAN route for incoming
IPSec packets for this SA. This is used in conjunction with the Route all internet traffic
through this SA check box.
12. Click OK , and then click Update .
To configure the remote SonicWALL, use the following steps:
1. Configure the network settings for the firewall using the Network tab located in the
General section.
2. Click Update and restart the SonicWALL if necessary.
3. Click VPN , then the Configure tab.
4. Create a name for the remote office SA, for example, Remote Office .