Managed Vpn - Watchguard Firebox X15 User Manual

• You must know if the IP address assigned to your Edge's
external interface is static or dynamic. To learn about IP
addresses, see Chapter 2, "Installing the Firebox X Edge."
• Your Edge model tells you the number of VPN tunnels that you
can create on your Edge. You can purchase a model upgrade for
your Edge to make more VPN tunnels, as described in "Enabling
the Model Upgrade Option" on page 56.
• If you connect two Microsoft Windows NT networks, they must
be in the same Microsoft Windows domain, or they must be
trusted domains. This is a Microsoft Networking problem, and
not a limit of the Firebox X Edge.
• If you want to use the DNS and WINS servers from the network
on the other side of the VPN
addresses of these servers.
The
Edge can give WINS and DNS IP addresses to the computers on its
trusted network if those computers get their IP addresses from the Edge
using DHCP. If you want to give the computers IP addresses of WINS and
DNS servers on the other side of the VPN,
into the DHCP settings in the trusted network setup. For information on
how to configure the Edge to give DHCP addresses, see "Using DHCP on
the trusted network" on page 68.
• You must know the network address of the private (trusted)
networks behind your Firebox X Edge and of the network
behind the other VPN device, and their subnet masks.
The private IP addresses of the computers behind your Firebox X
Edge cannot be the same as the IP addresses of the computers
the other side of the VPN tunnel. If your trusted network uses the
same IP addresses as the office to which it will create a VPN
tunnel, then your network or
their IP address arrangement to prevent IP address conflicts.

Managed VPN

You can configure a VPN tunnel on the Firebox® X Edge with two
procedures: Managed VPN and Manual VPN. For information on
creating a Manual VPN, see "Manual VPN: Setting Up Manual VPN
Tunnels" on page 178.
User Guide
tunnel, you must know the IP
you can type those addresses
N N
OTE OTE
the other network must change
Managed VPN
on
177