Watchguard Firebox X15, Руководство пользователя

Страница: 191 / 266

Managed VPN
User Guide 177
• You must know if the IP address assigned to your Edge’s
external interface is static or dynamic. To learn about IP
addresses, see Chapter 2, “Installing the Firebox X Edge.”
• Your Edge model tells you the number of VPN tunnels that you
can create on your Edge. You can purchase a model upgrade for
your Edge to make more VPN tunnels, as described in “Enabling
the Model Upgrade Option” on page 56.
• If you connect two Microsoft Windows NT networks, they must
be in the same Microsoft Windows domain, or they must be
trusted domains. This is a Microsoft Networking problem, and
not a limit of the Firebox X Edge.
• If you want to use the DNS and WINS servers from the network
on the other side of the VPN tunnel
, yo u must know the IP
addresses of these servers.
The
Edge can give WINS and DNS IP addresses to the computers on its
trusted network if those computers get their IP addresses fro m the Edge
using DHCP. If you want to give the computers IP addresses of WINS and
DNS servers on the other side of the VPN, yo
u ca n type those addresses
into the DHCP settings in the trusted network setup. For information on
how to configure the Edge to give DHCP addresses, see “Using DHCP on
the trusted network” on page 68.
• You must know the network address of the private (trusted)
networks behind your Firebox X Edge and of the network
behind the other VPN
dev ice, and their subnet masks.
N
OTE
N
OTE
The
private IP addresses of the computers behind your Firebox X
Edge cannot be the same as the IP addresses of the computers on
the other side of the VPN tunnel. If your trusted network uses the
same IP addresses as the office to which it will create a VPN
tunnel, then your network or
the other network must change
their IP address arrangement to prevent IP address conflicts.
Managed VPN
You can configure a VPN tunnel on the Firebox® X Edge with two
procedures: Managed VPN and Manual VPN. For information on
creating a Manual VPN, see “Manual VPN: Setting Up Manual VPN
Tunnels” on page 178.