Configuring A Vpn Sa Using Ike And Manual Key; Add/Modify Ipsec Security Associations; Security Policy; Destination Networks - SonicWALL TELE3 TZ Getting Started Manual

Configuring a VPN SA Using IKE and Manual Key

If your network administrator has provided you with the information to create a VPN SA using
IKE and Manual Key, use the instructions below to configure your TELE3 TZ or TELE3 TZX to
connect to the corporate network.
1. Log into the SonicWALL using admin for the User Name, and the password created when
you configured the SonicWALL to connect to the Internet.
2. Click VPN, and then the Configure tab.

Add/Modify IPSec Security Associations

3. Select Add New SA from the Security Association menu.
4. Select Manual Key from the IPSec Keying Mode menu.
5. Enter the name of the Security Association in the Name field.
6. Enter the corporate office WAN IP address in the IPSec Gateway Address field.

Security policy

7. Enter the Incoming SPI value in the Incoming SPI field.
8. Enter the Outgoing SPI value in the Outgoing SPI field.
9. Select the Encryption Method from the Encryption Method menu.
10. Enter the Encryption Key value into the Encryption Key field.
11. Enter the Authentication Key value into the Authentication Key field.

Destination Networks

12. Select Specify destination networks below, and click Add New Network...
13. Enter the Beginning Destination Network Range IP address in the Range Start field.
14. Enter the Ending Destination Network Range IP address in the Range End field.
15. Leave the Destination Subnet mask for NetBIOS broadcast field blank unless your
administrator has given you a value.

Advanced Settings

16. Click Advanced Settings and select the checkboxes designated by your administrator.
17. Click OK, and then click Update to configure the SA.

Testing Your VPN Tunnel

Your network administrator can provide information as to the best way of testing your
connection to the corporate network.
Page 26