Configuring Static Gateway-To-Gateway Tunnels - Symantec 360R - Security Gateway SGS Administration Manual

Configuring static Gateway-to-Gateway tunnels

5 On the VPN Policy drop-down list, select a VPN policy to which you want to
bind to the tunnel.
6 If you have a multi-session PPPoE ISP account, under Local Security
Gateway, in the PPPoE Session drop-down list, select a PPPoE session to
which you want to bind to the tunnel.
If you do not have a multi-session PPPoE ISP account, skip this step.
7 For model 360 or 360R, on the Local Endpoint drop-down list, select an
endpoint for the tunnel.
8 On the ID Type drop-down list, select a Phase 1 ID type.
9 In the Phase 1 ID text box, type the Phase 1 ID.
10 Under Remote Security Gateway, do the following:
In the Gateway Address text box, type the remote gateway address.
■
Optionally, in the ID Type drop-down list, select a Phase 1 ID type.
■
Optionally, in the Phase 1 ID text box, type the Phase 1 ID.
■
In the Pre-Shared Key text box, type a key.
■
In each Remote Subnet IP text box, type the IP address of the
■
destination network.
To create a global tunnel, type 0.0.0.0.
In each Mask text box, type the netmask of the destination network.
■
To create a global tunnel, type 255.0.0.0.
11 Click Add.
Static tunnels do not use any information from the Global IKE Policy (Phase 1
negotiation). You must manually type all of the information necessary to
establish the tunnel. However, you can define a VPN Policy for Phase 2
negotiation.
When defining static tunnels, you must enter an authentication key, as well as
an encryption key (if encryption is used). The keys must match on both sides of
the VPN. In addition, a Security Parameter Index (SPI) is manually typed and
included with every packet transmitted between security gateways. The SPI is a
unique gateway identifier that indicates the set of keys that belongs to each
packet.
Encryption and authentication key lengths
When you define a static tunnel, you must type an encryption key and an
authentication key. Each key has a specific key length based on the method that
Establishing secure VPN connections
Configuring Gateway-to-Gateway tunnels
93