Watchguard Firebox X20E, Руководство пользователя

Страница: 223 / 310

User Guide 211
Configuring IPSec Mobile User VPN
1
You can choose to make the .wgx file read-only so that the user cannot change the security
policy file. To do this, select the
Make the MUVPN client security policy read-only check box.
2
Set how the virtual adapter operates on the client (Disabled, Preferred, or Required). The remote
MUVPN computers can use a virtual adapter to get network settings, an IP address, and WINS
and DNS address assignments. You can set the virtual adapter rule for your mobile users to:
Disabled
The mobile user does not use a virtual adapter to connect with the MUVPN client. This is the
default setting. With the virtual adapter disabled, the MUVPN client is not assigned a WINS or
DNS address. Because of this, the computer must have correct WINS and DNS addresses
configured in the primary network card settings. See “Preparing remote computers for IPSec
MUVPN” on page 214 for information on entering WINS and DNS addresses in the network card
advanced settings.
Preferred
If the virtual adapter is in use or it is not available, the mobile user does not use a virtual adapter
to connect with the MUVPN client.
If the virtual adapter is available, the remote computer is assigned the WINS and DNS addresses
you entered in the
Firebox Users > Settings area of the Firebox X Edge configuration pages.
Required
The mobile user must use a virtual adapter to connect with the MUVPN client. If the virtual
adapter is not available on the MUVPN client computer, the VPN tunnel cannot connect.
The remote computer is assigned WINS and DNS addresses you entered in the
Firebox Users >
Settings area of the Firebox X Edge configuration pages.
3
MUVPN clients use shared Windows Internet Naming Service (WINS) and Domain Name System
(DNS) server addresses. DNS changes host names into IP addresses, while WINS changes NetBIOS