In Parallel With A Firewall (With Nat) - HP Sa3110 - VPN Server Appliance Reference Manual

VPN Device A (No NAT) VPN Device A (No NAT)
VPN Device A (No NAT) VPN Device A (No NAT)
Interface E0:
IP: 10.250.128.2 255.255.255.0
Mode: Red
Interface E1:
IP: 209.80.10.1 255.255.255.0
Default device: 209.80.10.2
Mode: Red
Config file entries/routing info:
security-profile site-to-site
tunnel SanFrancisco
route 10.250.130.0
255.255.255.0
device 209.80.20.1
In Parallel With In Parallel With
In Parallel With In Parallel With
a Firewall (With a Firewall (With a Firewall (With a Firewall (With
NAT) NAT) NAT) NAT)
Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450 Network Layout Reference Guide
Configuring an In Parallel With a Firewall (No NAT) Network Configuring an In Parallel With a Firewall (No NAT) Network
Configuring an In Parallel With a Firewall (No NAT) Network Configuring an In Parallel With a Firewall (No NAT) Network
Layout Layout
Layout Layout
When setting up a VPN device, you must configure many global
configuration settings. You configure the VPN device through
the VPN Manager or command shell.
To set up a parallel with a firewall (no NAT) configuration, use
the configuration parameters in the following table. Note that the
values of these parameters are examples only; you must enter
values specific to your network.
Table: Table: Table: Table: In Parallel With a Firewall (No NAT) Configuration In Parallel With a Firewall (No NAT) Configuration In Parallel With a Firewall (No NAT) Configuration In Parallel With a Firewall (No NAT) Configuration
Parameters Parameters Parameters Parameters
This scenario shows the following:
• A LAN-to-LAN connection between two VPN devices using
NAT.
• Each VPN device is attached to a router. The routers
connect through the Internet and perform NAT.
• Traffic travels from one local network, through the LAN-to-
LAN connection, to the other local network.
LAN-to-LAN Scenarios
VPN Device B (No NAT) VPN Device B (No NAT)
VPN Device B (No NAT) VPN Device B (No NAT)
Interface E0:
IP: 10.250.130.2 255.255.255.0
Mode: Red
Interface E1:IP: 209.80.20.1
255.255.255.0
Mode: Red
Config file entries/routing info:
security-profile site-to-site
tunnel Boston
route 10.250.128.0 255.255.255.0
device 209.80.10.1
19