Digi WAN 3G User Manual page 82

Local Endpoint:

If the Local Endpoint Type is set to Local endpoint is an internal interface, the
following prompts are displayed:
– Host address for tunnel's internal VPN interface: In the IP Address field, enter the
IP address for the virtual network interface in the IP Address. This is the IP address
which will be visible to devices on the remote private network.
– Discard packets sent to the remote subnet unless they come from this local subnet:
Select this option if the Digi device should discard IP packets transmitted from a device
on the local network and addressed to the remote network which do not come from the
subnet you specify below.
IP Address: Enter the IP address of the subnet.
Subnet Mask: Enter the mask for the subnet.
– As indicated on the settings page, having the local endpoint as an internal interface is
used in combination with NAT. Click here to configure the Network Address
Translation (NAT) settings. Select the interface name of vpn0 to configure NAT for this
tunnel.
If the Local Endpoint Type is set to Local endpoint is a subnet, prompts are displayed
for entering the network address and mask for the private network. Both the Digi unit
and the remote VPN device must be configured to use the same values.
– IP Address: Enter the IP address of the local private network.
– Subnet Mask: Enter the mask for the local private network.
 Remote Endpoint: Enter the IP address and subnet mask of the remote network. Both
the Digi unit and the remote VPN device must be configured to use the same values.
– Tunnel Network Traffic to the following Remote Network:
IP Address: Enter the IP address of the remote network.
Subnet Mask: Enter the subnet mask of the remote network.
Pre-Shared Key Settings

If you select the pre-shared key authentication method in one or more of your ISAKMP
Phase 1 Policies, then you will be prompted to supply the ID of the VPN device and the
preshared key used for authentication.
– Use the following IP address, FQDN, or username for the remote VPN's ID: Enter
the remote VPN device's ID here. Make sure the remote VPN device is configured to
send this ID.
– Use the following pre-shared key to negotiate IKE security settings: Enter the
preshared key here. This must match exactly with the preshared key set on the remote
VPN device.
C o n f i g u r e D i g i d e v i c e s
8 2