729386

LevelOne WBR-3407 Manual

118
Zoom out
Zoom in
Previous page
1/126
Next page
Appendix C - VPNs
115
Because the IKE and IPsec connections are separate, they have different SAs
(security associations).
Policies
VPN configuration settings are stored in Policies.
Note that different vendors use different terms. Generally, the terms "VPN Policy",
"IPSec Policy", and "IPSec Proposal" have the same meaning. However, some
vendors separate IKE Policies (Phase 1 parameters) from IPSec Policies (Phase 2
parameters).
For the Wireless ADSL Router; each VPN policy contains both Phase 1 and Phase 2
parameters (if IKE is used). Each policy defines:
• The address of the remote VPN endpoint
• The traffic which is allowed to use the VPN connection.
• The parameters (settings) for the IPsec SA (Security Association)
• If IKE is used, the parameters (settings) for the IKE SA (Security Association)
Generally, you will need at least one (1) VPN Policy for each remote site for which you
wish to establish VPN connections.
It is possible, and sometimes necessary, to have multiple Policies for the same remote
site. However, you should only Enable one (1) policy at a time.
VPN Configuration
The general rule is that each endpoint must have matching Policies, as follows:
VPN Endpoint
address
Each VPN endpoint must be configured to initiate or accept
connections to the remote VPN client or Gateway.
Usually, this requires having a fixed Internet IP address.
However, it is possible for a VPN Gateway to accept incoming
connections from a remote client where the client's IP address
is not known in advance.
Local & Remote
LAN definition
This determines which outgoing traffic will cause a VPN
connection to be established, and which incoming traffic will be
accepted. Each endpoint must be configured to pass and
accept the desired traffic from the remote endpoint.
If connecting 2 LANs, this requires that:
• Each endpoint must be aware of the IP addresses used on
the other endpoint.
• The 2 LANs MUST use different IP address ranges.
IKE parameters
If using IKE (recommended), the IKE parameters must match
(except for the SA lifetime, which can be different).
IPsec
parameters
The IPsec parameters at each endpoint must match.
… 118 …


Need help? Post your question in this forum.

Forumrules


Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

For example, Anti-Semitic content, racist content, or material that could result in a violent physical act.

For example, a credit card number, a personal identification number, or an unlisted home address. Note that email addresses and full names are not considered private information.

Forumrules

To achieve meaningful questions, we apply the following rules:

Register

Register getting emails for LevelOne WBR-3407 at:


You will receive an email to register for one or both of the options.


Get your user manual by e-mail

Enter your email address to receive the manual of LevelOne WBR-3407 in the language / languages: English as an attachment in your email.

The manual is 2,86 mb in size.

 

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.



Info