Digi Connect WAN Series User Manual page 60

Digi Connect WAN Family web interface
Socket tunnel settings
You can use a socket tunnel to connect two network devices: one on the Digi Connect WAN Family
product's local network and the other on the remote network. This is especially useful for providing
SSL data protection when the local devices do not support the SSL protocol.
One of the endpoint devices is configured to initiate the socket tunnel. The tunnel is initiated when
that device opens a TCP socket to the Digi Connect WAN Family product on the configured port
number. The Digi Connect WAN Family product then opens a separate connection to the specified
destination host. Once the tunnel is established, the Digi Connect WAN Family product acts as a proxy
for bi-directional data between the remote network socket and the local network socket, regardless
of which end initiated the tunnel.
Socket tunnel settings include:
Enable: Enables or disables the configured socket tunnel.
n
Timeout (seconds): The timeout, specified in seconds, controls how long the tunnel will
n
remain connected when there is no tunnel traffic. If the timeout value is zero, then no timeout
is in effect and the tunnel will stay up until some other event causes it to close.
Initiating Host: The hostname or IP address of the network device which will initiate the
n
tunnel. This field is optional.
Initiating Port: Specify the port number that the Digi device product will use to listen for the
n
initial tunnel connection.
Initiating Protocol: The protocol used between the device that initiates the tunnel and the
n
Digi device server. Currently, TCP and SSL are the two supported protocols.
Destination Host: The hostname or IP address of the destination network device.
n
Destination Port: The port number that the Digi device will use to make a connection to the
n
destination device.
Destination Protocol: The protocol used between Digi device and the destination device.
n
Currently, TCP and SSL are the two supported protocols. This protocol does not need to be the
same for both connections.
Click Add to add a socket tunnel. Click Apply to save the settings. Once the socket tunnel is
n
configured, select the Enable check box to enable the socket tunnel.
Virtual Private Network (VPN) settings
Use a Virtual Private Networks (VPN) to securely connect two private networks together so that
devices may connect from one network to the other network using secure channels. VPN uses IP
Security (IPsec) technology to protect the transferring of data over the Internet. All Digi Connect WAN
Family products except Digi Connect WAN support VPNs.
The Digi device is responsible for handling the routing between networks. Devices within the local
private network served by the Digi device can connect to devices on the remote network as if they are
in the local network. The VPN tunnels are configured using various security settings and methods to
ensure the networks are secured.
Uses for a VPN-enabled Digi device
VPN-enabled Digi devices, such as Digi Connect WAN VPN, are cellular-enabled routers that securely
connect remote subnets using IPsec VPN technology. Devices in the Digi device's private network can
Digi Connect WAN Family User Guide
Configuration through the web interface
60