HP Sa3110 - VPN Server Appliance Manual page 95

Related Related Related Related
Information Information Information Information
Hewlett-Packard Company Virtual Private Networking Concepts Guide
If a client user named John Doe wants to check his mail on the
mail server on the red network, he can do so through either VPN
device A or VPN device B. If the link definition on the client
includes both VPN device devices, the tunnel to the red side is
established with the VPN device that responds first. The question
for the mail server becomes which VPN device to send its replies
through.
Since the tunnel is established only on one VPN device, all
replies must go through that VPN device. This is accomplished
using Client IPs. Since the set of Client IPs is different on each
VPN device, when the mail server uses the Client IP as the
destination address on its replies, only the VPN device on which
the tunnel has been established accepts the packets for
processing. The tunnel definitions for the two VPN device
devices appear as shown in the following table.
Tunnel Definition Tunnel Definition
Tunnel Definition Tunnel Definition
Parameters Parameters
Parameters Parameters
Group name
Client IP
Number of clients
Secure profile (must
be previously
defined)
Tunnel mode
IP route
Load Balancing (page 6-1)
Tunnel Modes (page 5-20)
Tunnel Types (page 5-8)
The Template Concept
VPN Device A VPN Device A
VPN Device A VPN Device A
sales
10.1.1.193
30
dialup
Red
Not required
Redundancy
VPN Device B VPN Device B
VPN Device B VPN Device B
sales
10.1.1.225
30
dialup
Red
Not required
6-3