Tunneling To The Ces When Instant Internet Has A Dynamic Ip Address - Nortel BayStack Instant Internet 100-S Using Manual

192 Chapter 6 IP security and VPN
13 Click OK.
14 In the main Setup window, select the VPN tunnel and then click Configure.
15 Specify the default network to be equal to the connection to the router.
16 Clear the PFS check box. NAT is optional.
17 Click OK.
18 In the main Setup window, click Save and Exit.
19 Click Yes to have the changes take effect immediately.
20 Click Yes to test the connection (optional).
The tunnel is configured. For more information on how to initiate a tunnel after it
has been configured, refer to
Tunneling to the CES when Instant Internet has a dynamic IP
address
When a tunnel is established between the CES and an Instant Internet unit that
gets a dynamic IP address from the ISP, the tunnel is called an aggressive mode
tunnel. CES 2.6 includes additional support for aggressive mode clients.
Instant Internet can send identification information when a connection is made
using aggressive mode, therefore, CES 2.6 allows Instant Internet to have a
dynamic IP address. However, the CES never initiates an aggressive mode
connection; all such connections must be initiated from the opposite side of the
tunnel.
Configuring a VPN between Instant Internet and the CES when Instant Internet
has a Dynamic IP address is a two-step process:
• Configure the non-Contivity client connection on the CES, (next).
• Configure Instant Internet as an aggressive mode VPN tunnel (refer to
"Configuring Instant Internet as an aggressive-mode VPN tunnel" on
page
300868-G
"How a tunnel is initiated" on page
194).
186.