Nortel BSR222 Configuration page 234

234 Chapter 13 VPN
Table 57 VPN Branch Office — IP Policy
Label
Virtual Ending IP
Address
Local
Address Type
Starting IP Address
Ending IP Address /
Subnet Mask
NN47922-500
Description
When the Type field is configured to One-to-one or
Many-to-One, this field is N/A.
When the Type field is configured to Many One-to-one, enter the
ending (static) IP address of the range of IP addresses that you
want to use for the VPN tunnel.
Local IP addresses must be static and correspond to the remote
VPN switch's configured remote IP addresses.
Two active SAs can have the same local or remote IP address, but
not both. You can configure multiple SAs between the same local
and remote IP addresses, as long as only one is active at a time.
Two IP policies can have the same local or remote IP address, but
not both.
In order to have more than one active rule with the Secure
Gateway Address field set to 0.0.0.0, the ranges of the local IP
addresses cannot overlap between rules.
If you configure an active rule with 0.0.0.0 in the Secure Gateway
Address field and the LAN's full IP address range as the local IP
address, then you cannot configure any other active rules with the
Secure Gateway Address field set to 0.0.0.0.
Use the drop-down menu to choose Single Address, Range
Address, or Subnet Address. Select Single Address for a single
IP address. Select Range Address for a specific range of IP
addresses. Select Subnet Address to specify IP addresses on a
network by their subnet mask.
When the Address Type field is configured to Single Address,
enter a (static) IP address on the LAN behind your Business
Secure Router. When the Address Type field is configured to
Range Address, enter the beginning (static) IP address, in a
range of computers on your LAN behind your Business Secure
Router. When the Address Type field is configured to Subnet
Address, this is a (static) IP address on the LAN behind your
Business Secure Router.
When the Address Type field is configured to Single Address,
this field is N/A. When the Address Type field is configured to
Range Address, enter the end (static) IP address, in a range of
computers on the LAN behind your Business Secure Router.
When the Address Type field is configured to Subnet Address,
this is a subnet mask on the LAN behind your Business Secure
Router.