Vpn; Ipsec Autokey - Planet MH-4000 User Manual

Multi-Homing Security Gateway User's Manual

4.11 VPN

MH-2K/4K's VPN (Virtual Private Network) is set by the System Administrator. The System Administrator can
add, modify or remove VPN settings.
What is VPN?
To set up a Virtual Private Network (VPN), you don't need to configure an Access Policy to enable
encryption. Just fill in the following settings: VPN Name, Source Subnet, Destination Gateway, Destination
Subnet, Authentication Method, Preshare key, Encapsulation and IPSec lifetime. MH-2K/4K on both ends
must use the same Preshare key and IPSec lifetime to make a VPN connection.

4.11.1 IPSec Autokey

This chapter describes steps to create a VPN connection using Autokey IKE. Autokey IKE (Internet Key
Exchange) provides a standard method to negotiate keys between two security gateways. For example, with
two MH-2K/4K devices, IKE allows new keys to be generated after a set amount of time has passed or a
certain threshold of traffic has been exchanged.
Accessing the Autokey IKE window
Click IPSec Autokey under the VPN menu to enter the IPSec Autokey window. The IPSec Autokey table
displays current configured VPNs.
The fields in the IPSec Autokey window are:
Name: The VPN name to identify the VPN tunnel definition. The name must be different for the two sites
- 127 -