Ipsec Vpn Between Two Networks; Creating A Lan-To-Lan Ipsec Vpn Tunnel - D-Link DFL-700 - Security Appliance Product Manual

IPSec VPN between two networks

In the following example users on the main
office internal network can connect to the
branch office internal network and vice versa.
Communication between the two networks
takes place in an encrypted IPSec VPN tunnel
that connects the two DFL-700 NetDefend
Firewalls across the Internet. Users on the
internal networks are not aware that when they
connect to a computer on the other network
that the connection runs across the Internet.
As shown in the example, you can use the
DFL-700 to protect a branch office and a small
main office. Both of these DFL-700s can be
configured as IPSec VPN gateways to create a
VPN tunnel that connects the branch office
network to the main office network.
The example
between two internal networks. One may also
create VPN tunnels between an internal
network behind one VPN gateway and a DMZ
network behind another or between two remote
DMZ networks. The networks at the ends of the VPN tunnel are selected when you configure
the VPN policy.

Creating a LAN-to-LAN IPSec VPN Tunnel

Follow these steps to add a LAN-to-LAN Tunnel.
Step 1. Go to Firewall/VPN and choose Add new under IPSec.
Step 2. Enter a Name for the new tunnel in the name field. The name can contain
numbers (0-9) and upper and lower case letters (A-Z, a-z), and the special characters -
and _. No other special characters and spaces are allowed.
Step 3. Specify your local network, or your side of the tunnel, for example
192.168.1.0/255.255.255.0, in the Local Net field.
Step 4. Choose authentication type, either PSK (Pre-shared Key) or Certificate-based. If
you choose PSK, make sure both firewalls use exactly the same PSK.
Step 5. For Tunnel Type, choose LAN-to-LAN tunnel and specify the network behind the
other DFL-700 as Remote Net. Also specify the external IP of the other DFL-700, either an
IP or a DNS name.
Click the Apply button below to apply the changes or click Cancel to discard changes.
Repeat these steps with the firewall on the other site.
shows an IPSec
DFL-700 Firewall
DFL-700 Firewall
VPN