Watchguard Firebox X15, Руководство пользователя

Страница: 190 / 266

Configuring Virtual Private Networks
176 WatchGuard Firebox X Edge
Information about how to configure a Manual VPN to connect to
another VPN device is also included in this chapter. Use this section
to create VPN tunnels to any other IPSec VPN endpoint.
The last part of this chapter includes frequently asked questions,
information on how to keep the VPN tunnel operating correctly, and
instructions on how to see VPN tunnel statistics. These last sections
can help you troubleshoot problems with VPN.
For more information on VPN tunnels, see the Advanced FAQs:
https://www.watchguard.com/support/advancedfaqs
What You Need to Create a VPN
Before you configure your WatchGuard® Firebox® X Edge VPN net-
work, read these requirements:
• You must have two Firebox X Edge devices or one Firebox X
Edge and a second device that uses IPSec standards. Examples
of these devices are a Firebox III, Firebox X Core, Firebox X Peak,
or a Firebox SOHO 6. You must enable the VPN option on the
other device if it is not already active.
• You must have an Internet connection.
• The ISP for each VPN device must let IPSec go across their
networks.
Some ISPs do not let you create VPN tunnels on their networks
unless you upgrade your Internet service to a level that supports
VPN tunnels. Speak with the ISP to make sure they let you use
these ports and protocols:
- UDP Port 500 (Internet Key Exchange or IKE)
- UDP Port 4500 (NAT traversal)
- IP Protocol 50 (Encapsulating Security Payload or ESP)
• If the other side of the VPN tunnel is a WatchGuard Firebox X
and each Firebox is under WatchGuard System Manager
management, you can use the Managed VPN option. Managed
VPN is easier to configure than Manual VPN. You must get
information from the administrator of the Firebox on the other
side of the VPN to use this option.