Cradlepoint IBR1100 User Manual page 47

User Manual / IBR1100/IBR1150
• Model – Set your rule according to the specific model of modem.
• Type – Select by type of Internet source (Ethernet, LTE, Modem, Wireless as WAN, WiMAX).
• Serial Number – Select a 3G or LTE modem by the serial number.
• MAC Address – Select a WiMAX modem by MAC Address.
• Unique ID – Select by ID. This is generated by the router and displayed when the device is connected
to the router.
• Condition: Select "is," "is not," "starts with," "contains," or "ends with" to create your condition's
statement.
• Value: If the correct values are available, select from the dropdown list. You may need to manually input
the value.
Invert Binding: Advanced option that inverts the meaning of WAN Binding to only establish this tunnel when
the specified WAN Binding device(s) are NOT connected.
Add/Edit Tunnel – Local Networks
IP Version: Select IPv4 or IPv6.
The Network Address and the Netmask define what local devices have access to or can be accessed from the
VPN tunnel.
NOTE: the local network IP address MUST be different from the remote network IP address.
Optionally: A Port can be defined that will limit the traffic going through the VPN tunnel to only that port. If
the field is left blank, any port will be accepted by the tunnel.
Add/Edit Tunnel – Remote Gateway
Gateway: This value can be any of the following: an
IPv4 address, an IPv6 address, or a fully qualified
name in the form of "host.domain.com" (DNS names
are case-insensitive, so only lower case letters are
allowed). It is recommended that you use a dynamic
DNS hostname instead of the static IP address – by
using the dynamic DNS hostname, updates of the
remote WAN IP are compensated for while connecting
to a VPN tunnel.
Add/Edit Tunnel – Remote Networks
The Network Address and the Netmask define the
remote network address range that local devices will
have access to via the VPN tunnel.
NOTE: the remote network IP address MUST be
different from the local network IP address.
Optionally: A Port can be defined that will limit the traffic going through the VPN tunnel to only that port. If
the field is left blank, any port will be accepted by the tunnel.
Add/Edit Tunnel – IKE Phase 1
IKE security has two phases, phase 1 and phase 2. You have the ability to distinctly configure each phase, but
the default settings will be sufficient for most users.
To set up a tunnel with a remote site, you need to match your tunnel's IKE negotiation parameters with
the remote site. By selecting several encryption, hash, and DH group options, you improve your chances
©2016 Cradlepoint. All Rights Reserved. | +1.855.813.3385 | cradlepoint.com
7/15/16
47