Cyclades-PR2000
STEP SIX
Now, the Remote Security Networks must be defined. This is done in the CONFIG =>SECURITY =>VPN =>REMOTE IP NETWORKS =>ADD NETWORK menu. The IP address and network mask must be defined for all remote devices to be included in the remote network for VPN communication. The Remote Security Gateway IP address (set in step five) must also be given for each network. In the example, the RSG IP address for the network 10.255.255.0 is 9.9.9.1, and the RSG IP address for the network 192.168.0.0 is 20.20.20.1.
STEP SEVEN
The last step is to activate VPN and configure the VPN options. Be aware that after activating VPN on the local network, data sent to the remote network will not be forwarded until VPN is configured and activated on that network too. The VPN Options Menu parameters should be set using the guidelines given below. The options should be defined identically for all Remote Security Gateways in a VPN.
VPN Options Menu CONFIG =>SECURITY =>VPN =>OPTIONS
Parameter | Description |
Cyclades VPN Status | Activates the Virtual Private Network. Warning: until VPN is activated on both ends of |
| a given tunnel, all traffic will halt. |
Tunnel Keepalive | Keepalive messages are sent across each tunnel with this frequency, to make sure |
Timeout | that the router on the other end of the connection is operating. |
Tunnel Keepalive | If a keepalive message reply is not received, the router sends the request again this |
Retries | number of times. |
Tunnel Inactivity | If no messages are passed for this time period (keepalive messages not included), the |
Timeout | tunnel will be disconnected. |
Time Interval for VPN | This is the time between retries (for either tunnel creation or keepalive requests that |
Retries | are not acknowledged). |
Chapter 14 - Virtual Private Network Configuration | 119 |
