Perle IOLINK-520 User And System Administration Manual page 64

Applications
To do its job as a router, this device must know where to forward packets with IP addresses
outside the LAN. This may be done in a number of ways: a static IP route to the LAN at the
other end of the SA connection may be set, the IP address of the Internet Service Provider
may be set as the Default Gateway, or an IPSec policy item may be created specifically to
pass RIP packets.
To set a policy item for RIP packets, first set the action to bypass IPSec so the packets are
not processed.
" "
" "
Location: Main
then set up the rules to check for RIP packets
" "
" "
2.44 — IOLINK-520 & IOLINK-PRO Installation & Applications Guide
IPSec ESP SA
! Configuration
! Packet Services Set-up
! IP Security Set-up
IPSec ESP SA
Location: Main
! Configuration
! Packet Services Set-up
! IP Security Set-up
RIP packets (protocol 17 - UDP) to and from any IP and to and from port 520
will be passed through the WAN interface on this router.
! Policy Set-up
! Edit Item
pass_RIP
! Action
bypass_IPSec
! Policy Set-up
! Edit Item
pass_RIP
! Selection Rules
! Src IP
any
! Dest IP
any
! Protocol
17
! Src port
520
! Dest Port
520