Enterasys Aurorean ANG-3000 Installation & Service Manual page 86

Configuring the Remote ANG-3000/7000
72
2 Click Add Subnet.
The Add Subnet window appears as shown in Figure 51.
Figure 51 ANG Add Virtual Subnets Window
3 Enter an Subnet IP Address and Subnet Mask for the Virtual Subnet
in the fields provided.
CAUTION
We recommend creating separate groups and assigning separate virtual
subnets for all your site-to-site connections. This is necessary because RIP
does not forward knowledge of a route over the interface from which it
learned of that route. So if a remote client and a site-to-site tunnel obtain
their virtual IP addresses from the same virtual subnet on the Network
Gateway, then that remote user will not be able to learn the routes that are
known to the initiator of the site-to-site tunnel. This condition does not
apply to a terminating Network Gateway.
CAUTION
When you create a virtual subnet for Aurorean site-to-site tunnels, be sure
that this subnet does not overlap with a network assigned to any of your
ANG interfaces. For example, if the ANG external interface has the IP
address 246.135.6.20 and mask of 255.255.255.0, you cannot create a
virtual subnet with a 246.135.6.1 IP address and similar mask because
tunnels using that virtual subnet will not be able to connect to the ANG.
Installing Software & Setting Networking Configurables
Aurorean Installation & Service Guide
Chapter 3