Configuring Transparent Mode In Vpn Environments - Nokia IPSO 4.0 Reference Manual

2

Configuring Transparent Mode in VPN Environments

To configure transparent mode in a virtual private network environment, you must create a range
or group of addresses that will be protected behind the IP address on the bridge. This must be
done because addresses cannot be learned dynamically behind a firewall.
In this example, the network administrator of Network A wants to provide Network B with
access to certain addresses behind the Nokia Platform with Firewall, which is in transparent
mode.
To do this, the network administrator would do the following in the firewall software:
1. Create a group of addresses on Firewall A.
In this case, the network administrator groups together addresses x, y, and z into group M.
2. Create an object for the remote Firewall B.
3. Create a rule, for example, Group M; Network B; Encrypt.
The network administrator on Network B also creates a rule for encrypted traffic through
Firewall B.
134
Network A
X Y Z
Group M
Switch
Nokia Platform
with Firewall
Switch
ISP
Internet
Firewall B
Network B
00327
Nokia Network Voyager for IPSO 4.0 Reference Guide