CalAmp Viper 100 User Manual page 78

Enter the RF IP address of the VPN server(s). You may enter up to 4 VPN servers. The unit will attempt to establish a VPN
tunnel connection with the first server on the list. If unsuccessful, it will continue down the list in a round‐robin manner.
4.5.3.7 VPN FILTERS
The VPN filters provide criteria used to select which packets are sent through VPN tunnels. Packets passing through VPN
tunnels are protected with strong encryption. Traffic not matching these filters is discarded provided that the 'Block non-
VPN Traffic' setting is enabled on the endpoints of a VPN tunnel (default). Note: If "Block non-VPN Traffic" is disabled, the
traffic is forwarded in the clear.
VPN filters fields can be configured to limit the traffic going through the VPN tunnel. Depending on system requirements,
they may be set automatically using the Set to Defaults button or manually as shown in the examples below.
― Set to Defaults. Click to set the VPN filters based on the device's current Ethernet IP configuration. Filters are set to
forward all local traffic from Ethernet and the device itself via the VPN. Set to Defaults also changes the General VPN
Settings to the default parameters.
For VPN servers, it is recommended to set the source IP address to 0.0.0.0 (disable source IP address filter) to allow stations
anywhere on the core network to access to remote Vipers via the VPN.
Example 1
In this example the source netmask is 255.255.255.255 so only messages originating from the source IP address 172.30.51.3
will be passed through the VPN tunnel. The destination netmask is 255.255.255.0 so messages destined to IP addresses:
192.138.90.1-192.138.90.254 will be passed through the VPN tunnel.
The source port range is from 5555 to 6000 so only traffic from these ports will be allowed through the VPN tunnel.
Destination ports 0 to 0 allow packets to be passed through the VPN tunnel to any port on 192.138.90.1 to 192.138.90.254
Both the IP and port filter information are used to select which packets are sent via the VPN tunnel.
001-5008-000_Rev12e.docx |
#9 Viper_SC_Manual_ Page 71