Set Up The Branch Office - Secure Computing SG300 User Manual

When making a certificate based tunnel between Secure Computing SnapGear units, you
can obtain the Distinguished Name of a remote device's Certificate from the Details
column of the appropriate local certificate on the Certificate Lists tab of the IPSec page.
Enter the Local Certificate, which is the list of local certificates that have been uploaded
for x.509 authentication. Select the required certificate to be used to negotiate the tunnel.
Note
Use Convert to Advanced to convert the tunnel's configuration from using the Quick
Setup to using the Advanced format. Subsequent modifications of the tunnel's
configuration will be viewed using the Advanced format. Once this conversion is
confirmed, the tunnel configuration will no longer be able to be viewed or modified in the
Quick Setup.

Set Up the Branch Office

Enable IPSec
Select IPSec from the VPN section of the main menu. A page similar to the following is
displayed.
Check the Enable IPSec checkbox.
The Maximum Transmission Unit (MTU) of the IPSec interface can be configured by
filling in the desired MTU value in IPSec MTU. For most applications, this need not be
configured. However if it is set, the MTU value should be between 1400 and 1500. In
this example leave the checkbox unchecked. Click Submit to save the changes.
Virtual Private Networking
215