Epygi Quadro2x Administrator's Manual page 85

Quadro Baseline
The first IPSec Connection
Connection has the Connection Name text field that requires a
new mandatory IPSec connection name. If the text field is not
filled in, the error message otherwise an error will occur "Error:
Incorrect connection name" will appear.
Please Note: The input in the Connection Name field should
only be in Latin characters, otherwise an error occurs and IPSec
connection cannot be created.
The Peer type drop down list is used to choose the remote
machine type for the IPSec Connection to be established. If the
list does not include the required type of machine, choose
Other.
The VPN Network Topology drop down list allows you to select
the location of the peers participating to the VPN connection.
The following options are present in the list:
•
Quadro<>Peer – direct connection between Quadro and a
peer.
•
Quadro<>[Internet]<>Peer – connection between Quadro
and peer over Internet.
•
Quadro<>NAT<>[Internet]<>Peer – connection between
Quadro and peer over Internet through Quadro provider's
NAT.
•
Quadro<>[Internet]<>NAT<>Peer – connection between
Quadro and peer over Internet through peer provider's
NAT.
The second page of the IPSec Connection Wizard, IPSec
Connection Properties serves to specify the members of the
IPSec Connection and to set the basic parameters for
encryption.
A group of radio buttons are used with Dynamic IP/Road
Warrior and Static IP/ Remote Gateway to select if the
remote Quadro (or another VPN gateway device) is
connected to the Internet with a dynamic IP address and is
acting as a Road Warrior, or is connected to the Internet with
a fixed IP address and is acting as a VPN Gateway.
If Dynamic IP / RoadWarrior is selected, the Remote
Gateway IP Address text field will automatically generate the
value "any", to allow access independent from the sending IP
address.
Selecting Static IP / Remote Gateway requires entering the
IP address or the hostname of the remote Quadro (or another
VPN gateway device) in the Remote Gateway text field.
Please Note: The Static IP/ Remote Gateway selection is
not possible if this Gateway is positioned behind NAT, since
the IP-address of the remote gateway is not reachable
directly in this case.
Quadro <> Remote Gateway allows access from the local
Quadro to the remote VPN gateway (local subnet and remote
subnet are not included). This includes management access.
The checkbox
"Quadro<>NAT<>[Internet]<>Peer"
"Quadro<>[Internet]<>NAT<>Peer" the is selected from the
VPN Network Topology drop down list on the first page of
the IPSec Connection Wizard.
Local Subnet <> Remote Gateway allows access from all
stations connected to the local network to the remote VPN
gateway device (local Quadro and remote subnet are not
included). The checkbox
"Quadro<>[Internet]<>NAT<>Peer" is selected from the VPN
Network Topology drop down list on the first page of the
IPSec Connection Wizard.
Quadro2x, Quadro2xi; SW Version 4.0.x
Quadro2x Manual II: Administrator's Guide – Administrator's Graphical User Interface
Wizard page Add IPSec
is disabled when
or
is disabled when
Fig. II-141: IPSec Connection Wizard - Add IPSec Connection
Fig. II-142: IPSec Connection Wizard -IPSec Connection Properties
85