SonicWALL TELE3 SP, Руководство администратора

Страница: 139 / 210

Page 138 SonicWALL TELE3 SP Administrator’s Guide
5. Type in the main office WAN IP address for the IPSec Gateway Address .
6. Create an Incoming SPI using alphanumeric characters.
7. Create an Outgoing SPI using alphanumeric characters.
8. Select Strong Encrypt (ESP 3DES) as the Encryption Method .
9. Enter the Encryption Key from the Main Office configuration.
10. Click Add New Network . Enter the IP address, “192.168.11.1” in the Range Start field.
Enter the IP address, “192.168.11.254” in the Range End field. This Range End value is
appropriate even if NetBIOS broadcast support is enabled. Leave the subnet mask field
blank. Click
Update .
11. Click Advanced Settings and select the features that apply to the SA.
• Enable Windows Networking (NetBIOS) broadcast - if the remote clients use
Windows Network Neighborhood to browse remote networks.
• Apply NAT and firewall rules - to apply NAT and firewall rules to the SA or just firewall
rules if in Standard mode.
• Forward packets to remote VPNs - if creating a “hub and spoke” network configuration
• Route all internet traffic through this SA - if forcing internet traffic from the WAN to
use this SA to access a remote site.
• Default LAN Gateway if specifying the IP address of the default LAN route for incoming
IPSec packets for this SA. This is used in conjunction with the Route all internet traffic
through this SA check box.
12. Click OK , and then click Update .