Digi Connect WAN Series User Manual page 63

Digi Connect WAN Family web interface
Identity settings
n
Network Interface: mobile|0eth0: Select the network interface used to communicate
l
with the remote VPN device. The mobile0 device is the one with the cellular modem. In
most cases, this is the correct device to use to communicate with a remote VPN device on
the Internet.
Negotiate tunnel as soon as interface comes up: Check if the Digi device should establish
l
the VPN tunnel as soon as the selected network interface is ready to use. Clear this check
box if the Digi device should wait until a device on the local private network tries to
communicate with a device on the remote network before establishing the VPN tunnel.
Use the following as the identity: Use this option to control how the Digi device
l
identifies itself to the remote VPN device. The Digi device must identify itself to the remote
VPN device when it negotiates the tunnel. You must ensure both devices agree on what the
identification is. Select the Use the following as the identity option to enter a string such
as a DNS name or an FQDN. Select the Use the interface IP address if the Digi device
should send the IP address of the interface you selected above as its identity. Select Use
the identify certificate X.509... to use a PKI certificate. If using a PKI certificate,
remember to load it in the Administration >X.509 Certificate/Key Management web
page.
Local Endpoint:
n
If you set the Local Endpoint Type to Local endpoint is an internal interface, the following
prompts appear:
Host address for tunnel's internal VPN interface: In the IP Address field, type the IP
l
address for the virtual network interface. This is the IP address which will be visible to
devices on the remote private network.
Discard packets sent to the remote subnet unless they come from this local subnet: Select
l
this option if the Digi device should discard IP packets transmitted from a device on the
local network and addressed to the remote network which do not come from the subnet
you specify below.
IP Address: Type the IP address of the subnet.
Subnet Mask: Type the mask for the subnet.
As indicated on the settings page, use the local endpoint as an internal interface in
l
combination with NAT. Click here to configure the Network Address Translation (NAT)
settings. Select the interface name of vpn0 to configure NAT for this tunnel.
If you set the Local Endpoint Type to Local endpoint is a subnet, prompts for entering the
network address and mask for the private network appear. Both the Digi unit and the remote
VPN device must be configured to use the same values.
IP Address: Type the IP address of the local private network.
l
Subnet Mask: Type the mask for the local private network.
l
Digi Connect WAN Family User Guide
Configuration through the web interface
63