Figure 10.6. Intranet Vpn Policy Configuration On Isr2; Table 10.8. Outbound Un-Translated Firewall Rule For Vpn Packets On Isr1 - Asus Internet Security Router User Manual

Internet Security Router User's Manual
Refer to the section 10.3 Establish VPN Connection Using Automatic Keying to configure VPN policies on
ISR2 using automatic keying.
Step 2: Configure Firewall rules
1. Configure outbound Firewall rule to allow packets from 192.168.2.0/255.255.255.0 to
192.168.1.0/255.255.255.0 without any NAT.
2. Configure inbound Firewall rule to allow packets from 192.168.1.0/255.255.255.0 to
192.168.2.0/255.255.255.0 without any NAT.
Table 10.8 and Table 10.9 provide the parameters to be configured for the outbound and inbound Firewall rule
fields. For a general description on configuring any inbound/outbound Firewall rule, please refer to sections 9.3
and 9.4.

Table 10.8. Outbound Un-translated Firewall Rule for VPN Packets on ISR1

Field
Source IP
Destination IP

Figure 10.6. Intranet VPN Policy Configuration on ISR2

Type
Address
Mask
Type
Address
Value
Subnet
192.168.2.0
255.255.255.0
Subnet
192.168.1.0
Chapter 10. Configuring VPN
99