Siemens RUGGEDCOM ROX II User Manual page 469

RUGGEDCOM ROX II
CLI User Guide
1 1
192.168.50.1/24
192.168.50.100/24
Figure 19: Topology – Site-to-Site Encrypted VPN Tunnel with a Pre-Shared Key
1. Device A 2. IPsec Encrypted VPN Tunnel 3. Device B 4. Client 1 5. Client 2
To configure a VPN tunnel, do the following:
1. Configure a connection name for the VPN. For more information, refer to
Connection".
2. Configure Device A:
a. Configure a host name for the device. For more information, refer to
Name".
b. Add a unique pre-shared key and configure the following parameters:
Local Address
Remote Address
For more information, refer to
c. Add an IPsec connection and configure the following parameters:
Startup Operation
Authenticate By
Connection Type
For more information about IPsec connections, refer to
d. Configure an Internet Key Exchange (IKE) algorithm with default values. For more information, refer to
Section 12.8.7.2, "Adding an IKE
e. Configure an Encapsulated Security Payload (ESP) algorithm with default values. For more information,
refer to Section 12.8.8.3, "Adding an ESP
f. Configure the left connection end for the IPsec tunnel with the following public IP address parameters:
Example: Configuring an Encrypted VPN Tunnel
2.2.2.1/30
4
Parameter
Section 12.8.5.2, "Adding a Pre-Shared
Parameter
Algorithm".
2
2.2.2.1/30
2.2.2.2/30
start
secret
tunnel
Section 12.8.6.2, "Adding a
Algorithm".
Tunneling and VPNs
2.2.2.2/30
3
192.168.60.1/24
192.168.60.100/24
5
Section 12.8.6.2, "Adding a
Section 5.2, "Configuring the Host
Value
Key".
Value
Connection".
Chapter 12
423