IP Interfaces
Configure a GRE Tunnel to a Remote Device
STEP 1
STEP 2
STEP 3
From the LSM menu, select Network > Configuration > IP Interfaces.
On the IP Interfaces page, click Create IP Interface or select the Edit icon for the interface that you want to edit.
On the Create/Edit IP Interfaces page, click GRE Tunnel secured by IPSec SA as the Interface Type. Then, select the Security Association from the
STEP 4 Complete the GRE Interface Config as follows:
STEP A In the Remote Tunnel Endpoint, type the IP address for the remote device on the public network.
STEP B In the IP Address field, enter the IP address of the tunnel on the local network on the external virtual interface. Choose an unused IP address that is routable through your network.
STEP C In the Peer IP Address field, type the IP address for the peer. This is the IP address entered in the IP Address field on the remote device.
STEP 5 In the Security Zones table, configure the security zones assigned to the tunnel. For details, see “Manage Security Zones for IP Interfaces” on page 149.
STEP 6 Click Save.
Click Cancel to return to the Network - Interfaces page without saving the changes.
After you have configured the basic options for the GRE tunnel, you can manage the security zones associated with the interface, or configure routing in the Advanced Options section. For details, see the following topics:
•“Manage Security Zones for IP Interfaces” on page 149
•“Configuring Routing for IP Interfaces” on page 150
Manage Security Zones for IP Interfaces
Security Zones can be configured to control traffic across the network. Each security zone is associated with an IP interface.
The IP Interfaces page lists the zones that are assigned to each interface. Layer 2 Firewalling and IPS Filtering can be applied between any two security zones even if they are on the same IP interface.
You can manage (add or remove) the Security Zone configuration for an IP interface from the Edit/ Create IP Interface page.
Manage (add or remove) Security Zones for IP Interfaces
STEP 1
STEP 2
STEP 3
From the LSM menu, select Network > Configuration > IP Interfaces.
On the IP Interfaces page, click the Create IP Interface button or select the Edit icon for the interface that you want to edit.
On the Create/Edit IP Interfaces page, scroll down to the Security Zone table.
X Family LSM User’s Guide V 2.5.1 | 149 |
|
|