Examples - Planet VRT-401 User Manual

Examples

This section describes some examples of using VRT-401 in common VPN situations.
Example 1: Connecting 2 VRT-401s
In this example, 2 LANs are connected via VPN.
Note
The LANs MUST use different IP address ranges.
Both endpoints have fixed WAN (Internet) IP addresses.
Configuration Settings
Setting
Name
Remote Endpoint
Local
IP addresses
Remote
IP addresses
Key Exchange
IKE SA Parameters
IKE Direction
Local Identity
Remote Identity
IKE Authentica-
tion method
Figure 53: Connecting 2 VRT-401s
LAN A Gateway
Policy 1
205.17.11.43
Any
192.168.1.1 to
192.168.1.254
IKE
Both ways
IP address
IP address
Pre-shared Key
LAN B Gateway
Policy 1
202.11.13.211
Any
192.168.0.1 to
192.168.0.254
IKE
Both ways
IP address
IP address
Pre-shared Key
Notes
Name does not affect
operation. Select a
meaningful name.
Other endpoint's WAN
(Internet) IP address.
Use a more restrictive
definition if possible.
Address range on other
endpoint.
Use a more restrictive
definition if possible.
Must match
Does not have to match.
Either endpoint can
block 1 direction.
IP address is the most
common ID method
IP address is the most
common ID method
Certificates are not
widely used.
VPN
83