23.6 Example of a more complex Kerio VPN configuration
323
Figure23.46 TheLondon filial office — VPN server configuration
For a detailed description on the VPN server configuration, refer to chapter 23.1.
5. Create an active endpoint of the VPN tunnel which will connect to the headquarters server
(newyork.company.com). Use the fingerprint of the VPN server of the headquarters as a
specification of the fingerprint of the remote SSL certificate.
On the Advanced tab, select the Use custom routes only option and set routes to headquar-
ters’ local networks.
At this point, connection should be established (i.e. the tunnel should be created). If
connected successfully, the Connected status will be reported in the Adapter info column
for both ends of the tunnel. If the connection cannot be established, we recommend you
tocheck the configuration of the traffic rules andtest availability of the remote server — in
our example, the ping gw-newyork.company.com command can be used at the London