Stormshield SN series Configuration Manual page 9

Modifying an Ethernet interface
(advanced mode)
Creating a VLAN
Modifying a VLAN
Virtual interfaces
"IPSec interfaces (VTI)" tab
"Loopback" tab
Routing
"IPv6 static route" tab
"IPv6 dynamic routing" tab
"IPv6 return routes" tab
DHCP
General
"DHCP server" service
"DHCP relay" service
Network objects
Possible actions
The different types of objects
Filtering
"Filtering" tab
HOW TO: Implementing a filter rule 388
Requirements
Creating network objects
Selecting a filter policy
Adding a filter rule
Activating the filter policy
Testing the Filter / NAT policy
HOW TO: setting up a NAT rule
Purpose
Creating network objects
Selecting a filter policy
Creating a filter and NAT rule
Activating the filter policy
Testing the Filter-NAT policy
HOW TO: IPSec VPN - Authentication
by pre-shared key
Implementation
Configuring the main site
Configuring the remote site
Checking the tunnel setup
Checking in Stormshield Network
Realtime Monitor
Incident resolution - Common errors 401
HOW TO: IPSec VPN - Authentication
by certificate
Implementation
Configuring the main site
Configuring remote sites A and B
Page 9/448
Checking the tunnel setup
377
Checking in Stormshield Network Realtime
378
Monitor
378
Incident resolution - Common errors
379
HOW TO: IPSec VPN - Hub and Spoke
379
Configuration
379
379 Architectures shown
379 Case no. 1: internal traffic via IPSec tunnels415
380 Case no.2: all traffic via IPSec tunnels
Configuration requirements
381
381
Case no.1: internal traffic via IPSec
tunnels
381
382
384
Configuring the Hub site
385
Configuring the satellite sites Spoke A and
Spoke B
385
Case no.2: all traffic via IPSec tunnels
386
386
Configuring the central Hub site
Configuring the satellite sites Spoke A and
386
Spoke B
Checking the tunnel setup
388 Via the Stormshield Network administration
suite
388
Information and diagnosis tools in console
389
mode
389
Incident resolution - Common errors
391
391
Appendix A: Allowed names
Firewall name
392
Login and password
392
Comments (prohibited characters)
392
Interface names
393
Objects
393
DNS (FQDN) name objects
395
Certificates
395
Users
IPSEC VPN
397
SSL VPN
E-mail alerts
397
397
Appendix B: Structure of an objects
400
database in CSV format
401
Host
IP address range
401
DNS name (FQDN)
Network
Port
404
Port range
404
Protocol
405
410
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
413
413
413
415
415
415
416
417
417
417
419
421
422
423
424
424
425
427
428
428
428
428
428
428
429
429
429
429
429
429
430
430
430
430
431
431
431
432