Chapter 10. Configuring VPN
Step 1: Configure VPN connection rules
Refer to the section 10.3 Establish VPN Connection Using Automatic Keying to configure VPN policies on
ISR1 using automatic keying.
Step 2: Configure Firewall rules
1. Configure outbound Firewall rule to allow packets from 192.168.1.0/255.255.255.0 to
192.168.2.0/255.255.255.0 without any NAT
2. Configure inbound Firewall rule to allow packets from 192.168.2.0/255.255.255.0 to
192.168.1.0/255.255.255.0 without any NAT.
Table 10.6 and Table 10.7 provide the parameters to be configured for the outbound and inbound Firewall rule
fields. For a general description on configuring any inbound/outbound Firewall rule, please refer to sections 9.3
and 9.4.
Table 10.6. Outbound Un-translated Firewall Rule for VPN Packets on ISR1
Field
Source IP
Destination IP
NAT
Action
VPN
Note: The outbound Un-translated Firewall rule has to be added the existing rule ID 1001.
Table 10.7. Inbound Un-translated Firewall Rule for VPN Packets on ISR1
Field
Source IP
Destination IP
NAT
Action
VPN
10.6.1.2 Configure Rules on Internet Security Router 2 (ISR2)
Step 1: Configure VPN connection rules
98
Figure 10.5. Intranet VPN Policy Configuration on ISR1
Type
Address
Mask
Type
Address
Mask
Type
Address
Mask
Type
Address
Mask
Internet Security Router User's Manual
Value
Subnet
192.168.1.0
255.255.255.0
Subnet
192.168.2.0
255.255.255.0
None
Allow
Enable
Value
Subnet
192.168.2.0
255.255.255.0
Subnet
192.168.1.0
255.255.255.0
None
Allow
Enable