Digi Connect WAN Series User Manual page 64

Digi Connect WAN Family web interface
Remote Endpoint: Type the IP address and subnet mask of the remote network. Both the Digi
n
device and the remote VPN device must be configured to use the same values.
Tunnel Network Traffic to the following Remote Network:
l
IP Address: Type the IP address of the remote network.
Subnet Mask: Type the subnet mask of the remote network.
Digi devices support a mode of VPN tunnel operation called VPN tunnel all mode, where all
traffic that is not directed to the local subnet is sent across a VPN tunnel to a remote
network. This mode is different from the normal mode of VPN tunnel operation, where the
range of the remote subnet is explicitly set VPN tunnel all mode is supported when the Digi
device is the initiator of the VPN connection. It is not supported when the Digi device is the
server.
For example, in the normal mode of operation, a user might set up a VPN tunnel between
the local subnet at 192.168.1.0/24 to a remote subnet at 172.16.1.0/24. In this case, the
remote subnet range is the subnet at 172.16.1.x. In VPN tunnel all mode, the remote
subnet is any address that is not on the local subnet, or in this case, anything not in the
subnet 192.16.1.x.
The local subnet must be defined as a specific range, for example 192.168.1.0/24. This is
specified in the VPN settings by setting the IP address of the local subnet to 192.168.1.0,
and the subnet mask to 255.255.255.0. VPN tunnel all mode is specified by setting the
remote IP address to 0.0.0.0, and the remote subnet mask to 0.0.0.0.
With the configuration described above, any frames sent from the 192.168.1.x network to
any IP address not in the 192.168.1.x subnet will be set over the VPN tunnel to the remote
subnet.
When configuring a Digi device for VPN tunnel all mode and the device allows for setting the
gateway priority, set the gateway priority. The gateway priority is set on the
Configuration > Network > Advanced Network Settings page in the Gateway Priority
setting. Set the gateway priority to Ethernet for Ethernet-enabled Digi devices, or WiFi for
a wireless Digi devices. If the Digi device's IP address on the Ethernet (or wireless)
interface is statically configured, specify the address for the gateway on that interface. The
gateway address is set in the Configuration > Network > Ethernet IP Settings page.
Digi Connect WAN Family User Guide
Configuration through the web interface
64