3Com OfficeConnect Remote 812 manual IP Routing, Manual Setup

6-14CHAPTER 6: MANUAL SETUP

Adding a Framed Route If you wish to set up a route to a network on the private (LAN) side of a remote for a VPN Tunnel site, use a framed route.

To add a framed route for a VPN tunnel, enter the add framed_route vc command or the add framed_route tunnel command at the CLI prompt. For more information, see add framed_route vc <name> and add framed_route tunnel <tunnel_name> in Appendix B.

In the following example, the add framed_route tunnel command is used to set up a framed route for a VPN tunnel called mtm.

add framed_route tunnel mtm gateway 0.0.0.0. ip_route 191.168.0.0/B metric 3

Note that you can delete a framed route you have added by entering the delete framed_route command and specifying the name of the framed route you wish to delete. For more information, see Configuring Static and Framed IP Routes and delete framed route vc.

Before adding a framed route for a VPN tunnel, ensure that the tunnel is disabled. Once the tunnel has been disabled, you can then add the framed route using the add framed_route command.

A framed route is much like a static route in that you manually configure the route. The difference is that a static route is defined for the LAN while a framed route is associated with a remote site connection. Also, while a static route is active when the LAN is connected, a framed route is active only when the connection to the associated remote site is active.

IP Routing

The OCR 812 can be configured as an IP Router to forward packets between the local LAN interface and one or more remote sites.

A forwarding table is maintained which specifies which interface to route an IP packet based on the destination IP address. Entries in the forwarding table are both static and dynamic. Static entries are based on the LAN’s and remote site's subnet addresses and user configured static routes. Dynamic entries are added when RIP is enabled and routes are learned from neighboring routers.

To configure IP routing, IP must be defined on both the LAN interface and one or more VC profiles. On the LAN, an IP network must exist with a specified IP address and subnet mask. In the VC profile, IP routing needs to be enabled, and the remote router address, a remote subnet mask and local WAN interface address need to be configured. The remote site address configuration can be learned dynamically when the connection is established if the Network Service is PPP, otherwise it has to be specified.

Remember to save your configuration using the save all command before rebooting your OCR 812 so your changes will be written to permanent FLASH memory (i.e. permanently saved).