Ipsec Vpn - AMPLIFIED ENGINEERING fatbox G3 Manual

WEB
MANAGEMENT
3. 7

IPSEC VPN

FATBOX G3 integrates
Strongswan 5.0 IPSEC
VPN client to enable secure
encrypted networking and
communications to your
remote Ethernet devices.
IPSEC VPN configuration can
be extremely complex to
deploy successfully, especial-
ly for users not from network
security sectors.
EXAMPLE. (Site-to-Site (L2L) IPSEC VPN Tunnel 192.168.1.0/24 -- 10.1.1.0/24)
After the remote end-point (e.g. a CISCO ASA520 security appliance with internet access and connected to the customer's SCADA or
payment processing server) is configured to accept remote IPSEC site-to-site connections.
Workstation Data Server
e.g. SCADA
Server
192.168.1.20/24
Switch
HSPA Cellular
NET
Firewall
e.g. CISCO ASA5520
192.168.1.0/202.200.XXX.XXX
fatbox G3
fatbox G3
dc et h1 et h0 ser i al di p
TX RX I N GND 1 2 3 4
fatbox G3
D- D+
amplifie d
R
engineerin g
ETH1
10.1.1.0/24
Remote Device
10.1.1.3