Managing Private Subnets; Configuring Private Subnets For Connection Ends - Siemens RUGGEDCOM ROX II User Manual

Chapter 5
Setup and Configuration
Parameter
8. If required, configure a subnet for the connection end. For more information, refer to
"Adding an Address for a Private
Type commit and press Enter to save the changes, or type revert and press Enter to abort.
9.
Section 5.29.10

Managing Private Subnets

If the device is connected to an internal, private subnet, access to the subnet can be granted to the device at the
other end of the IPsec tunnel. Only the IP address and mask of the private subnet is required.
The following sections describe how to configure and manage addresses for private subnets:
• Section 5.29.10.1, "Configuring Private Subnets for Connection Ends"
• Section 5.29.10.2, "Viewing a List of Addresses for Private Subnets"
• Section 5.29.10.3, "Adding an Address for a Private Subnet"
• Section 5.29.10.4, "Deleting an Address for a Private Subnet"
Section 5.29.10.1

Configuring Private Subnets for Connection Ends

To configure a private subnet for either the left (local router) or right (remote router) connection ends in a VPN, do
the following:
1. Make sure the CLI is in Configuration mode.
2. Navigate to tunnel » ipsec » connection/{end} » subnet, where {end} is the either the left (local router) or
right (remote router) connection end.
3. Configure the following parameter(s) as required:
Parameter
{ network }
4. Add one or more subnet addresses. For more information, refer to
a Private Subnet".
Type commit and press Enter to save the changes, or type revert and press Enter to abort.
5.
472
Description
main mode peer ID is ID_FQDN: '@example.com', but when a
Vista, Windows 7 or other RFC 3947 compliant client connects,
Openswan reports the main mode peer ID is ID_IPV4_ADDR:
'192.168.1.1'. This will cause issues connecting to the IPsec
server. In such cases, setting this option to draft-ietf-ipsec-nat-
t-ike-02 will solve this problem. The default value is 'rfc-3947'
unless overwritten by the default connection setting.
Subnet".
Description
Synopsis: A string 9 to 18 characters long
The IP address/prefix.
Section 5.29.10.3,
Section 5.29.10.3, "Adding an Address for
Managing Private Subnets
RUGGEDCOM ROX II
CLI User Guide