Extreme Networks Altitude 4700 Series Product Reference Manual page 227

Del
Tunnel Name
Remote Subnet
Remote Gateway
Key Exchange
Type
NOTE
When creating a tunnel, the remote subnet and remote subnet mask must be that of the target device's
LAN settings. The remote gateway must be that of the target device's WAN IP address.
If Access Point #1 has the following values:
WAN IP address: 20.1.1.2
●
LAN IP address: 10.1.1.1
●
Subnet Mask: 255.0.0.0
●
Then, the VPN values for Access Point #2 should be:
Remote subnet: 10.1.1.0 or 10.0.0.0
●
Remote subnet mask: 255.0.0.0
●
Remote gateway: 20.1.1.2
●
3 If a VPN tunnel has been added to the list of available access point tunnels, use the VPN Tunnel
Config field to optionally modify the tunnel's properties.
Tunnel Name
Interface name
Local WAN IP
Remote Subnet
Remote Subnet
Mask
Altitude 4700 Series Access Point Product Reference Guide
Click Del to delete a highlighted VPN tunnel. There is no
confirmation before deleting the tunnel.
The Tunnel Name column lists the name of each VPN
access point
tunnel on the
The Remote Subnet column lists the remote subnet for
each tunnel. The remote subnet is the subnet the remote
network uses for connection.
The Remote Gateway column lists a remote gateway IP
address for each tunnel. The numeric remote gateway is
the gateway IP address on the remote network the VPN
tunnel connects to. Ensure the address is the same as the
WAN port address of the target gateway AP or controller.
The Key Exchange Type column lists the key exchange
type for passing keys between both ends of a VPN tunnel.
If Manual Key Exchange is selected, this column displays
Manual. If Auto (IKE) Key Exchange is selected, the field
displays Automatic.
Enter a name to define the VPN tunnel. The tunnel name
is used to uniquely identify each tunnel. Select a name
best suited to that tunnel's function so it can be selected
again in the future if required in a similar application.
Use the drop-down menu to specify the LAN1, LAN2 or
WAN connection used for routing VPN traffic. Remember,
only one LAN connection can be active on the Access
Point Ethernet port at a time. The LAN connection
specified from the LAN screen to receive priority for
Ethernet port connectivity may be the better subnet to
select for VPN traffic.
Enter the WAN's numerical (non-DNS) IP address in order
for the tunnel to pass traffic to a remote network.
Specify the numerical (non-DNS) IP address for the
Remote Subnet.
Enter the subnet mask for the tunnel's remote network for
the tunnel. The remote subnet mask is the subnet setting
for the remote network the tunnel connects to.
.
227