D-Link DWC-1000 User Manual - Page 229

Local Gateway Type: identify - review

Page 229 highlights

Wireless Controller User Manual Set t h e Co n n ectio n Name an d p re -sh ared key : t h e co nn ectio n n ame is u s ed fo r man ag emen t, and t h e p re -s h ared key will b e req u ired o n t h e VPN clien t o r g at eway t o es t ab lis h t h e t u n n el Det ermin e t h e lo cal g at eway fo r t h is t u n n el; if t h ere is mo re t h an 1 Op t io n co n fig u red t h e tunnel can be configured for either of the gateways . 2. Configure Remote and Local Option address for the tunnel endpoints Remo t e Gat eway Ty p e: id en t ify t h e remo t e en dp oin t o f t h e t u nnel b y FQDN o r s t at ic IP ad d ress Remo t e Op t io n IP ad d res s / FQDN: Th is field is en ab led o n ly if t h e p eer y o u are t ry in g t o co n n ect t o is a Gat eway . Fo r VPN Clien t s , t h is IP ad d ress o r In t ern et Name is d et ermin ed wh en a connection reques t is received from a client. Lo cal Gat eway Ty p e: id en t ify t h is co n t ro ller‟s en d p o in t o f t h e t u n n el b y FQDN o r s t at ic IP ad d res s Lo cal Op t io n IP ad d res s / FQDN: Th is field can b e left b lan k if y o u are n o t u s in g a d ifferen t FQDN or IP addres s tha n the one s pecified in the Option port‟s configuration. 3. Configure the Secure Connection Remote Accessibility fields to identify the remote network: Remo t e LA N IP ad d res s : ad d res s o f t h e LA N b eh in d t h e p eer g at eway Remo t e LA N Su b n et M as k: t h e s u b n et mas k o f t h e LA N b eh in d t h e p eer  Note: Th e IP ad d res s ran ge u sed o n t h e remo t e LA N mu s t b e d ifferen t fro m t h e IP ad d res s ran g e u s ed o n t h e lo cal LA N. 4. Review the settings and click Connect to establish the tunnel. The W izard will create an A uto IPs ec policy with t he following default values for a VPN Clien t o r Gat eway p o licy (t h es e can b e acces s ed fro m a lin k o n t h e W izard page): Par am eter De f au lt value f rom Wizard Exchange Mode Aggressive (Client policy ) or Main (Gatew ay policy) ID Type FQDN 227

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324

Wireless Controller
User Manual
227
Set the Connection Name and pre-shared key: the connection name is used for management, and
the pre-shared key will be required on the VPN client or gateway to establish the tunnel
Determine the local gateway for this tunnel; if there is more than 1 Option configured the
tunnel can be configured for either of the gateways.
2.
Configure Remote and Local Option address for the tunnel endpoints
Remote Gateway Type: identify the remote endpoint of the tunnel by FQDN or static IP address
Remote Option IP address / FQDN: This field is enabled only if the peer you are trying to
connect to is a Gateway. For VPN Clients, this IP address or Internet Name is determined when
a connection request is received from a client.
Local Gateway Type: identify this
controller‟s
endpoint of the tunnel by FQDN or static IP
address
Local Option IP address / FQDN: This field can be left blank if you are not using a different
FQDN or IP address than the one specified in the Option
port‟s configuration.
3.
Configure the Secure Connection Remote Accessibility fields to identify the remote
network:
Remote LAN IP address: address of the LAN behind the peer gateway
Remote LAN Subnet Mask: the subnet mask of the LAN behind the peer
Note:
The IP address range used on the remote LAN must be different from
the IP address range used on the local LAN.
4.
Review the settings and click Connect to establish the tunnel.
The Wizard will create an Auto IPsec policy with the following default values for a
VPN Client or Gateway policy (these can be accessed from a link on the Wizard
page):
Parameter
Default value from Wizard
Exchange Mode
Aggressive (Client policy ) or Main (Gatew ay policy)
ID Type
FQDN