Table of Contents
Advertisement
Application Scenarios
The ISG50's application scenarios make it easier to configure your VPN connection settings.
Table 121 IPSec VPN Application Scenarios
SITE-TO-SITE
Choose this if the
remote IPSec router
has a static IP address
or a domain name. For
example, a branch
office with an ISG50 or
a VPN router with a
static IP address.
This ISG50 can initiate
the VPN tunnel.
The remote IPSec
router can also initiate
the VPN tunnel if this
ISG50 has a static IP
address or a domain
name.
Finding Out More
• See
Section 6.6.14 on page 102
• See
Section 24.4 on page 386
• See
Section 5.4 on page 77
• See
Section 7.4 on page 113
ISG50 User's Guide
SITE-TO-SITE WITH
REMOTE ACCESS
DYNAMIC PEER
(SERVER ROLE)
Choose this if the
Choose this to allow
remote IPSec router
incoming connections
has a dynamic IP
from IPSec VPN clients,
address. For example,
including smartphone
a branch office with an
applications.
ISG50 or a VPN router
Smartphone
with a dynamic IP
applications require a
address.
valid subscription to
use. See
You don't specify the
page
remote IPSec router's
address, but you
The clients have
specify the remote
dynamic IP addresses
policy (the addresses of
and are also known as
the devices behind the
dial-in users.
remote IPSec router).
You don't specify the
This ISG50 must have
addresses of the client
a static IP address or a
IPSec routers or the
remote policy.
domain name.
Only the remote IPSec
This creates a dynamic
router can initiate the
IPSec VPN rule that can
VPN tunnel.
let multiple clients
connect.
Only the clients can
initiate the VPN tunnel.
for related information on these screens.
for IPSec VPN background information.
for the IPSec VPN quick setup wizard.
for an example of configuring IPSec VPN.
REMOTE ACCESS
(CLIENT ROLE)
Choose this to connect
to an IPSec server.
This ISG50 is the client
(dial-in user).
Client role ISG50s
initiate IPSec VPN
connections to a server
Chapter 11 on
role ISG50.
229.
This ISG50 can have a
dynamic IP address.
The IPSec server
doesn't configure this
ISG50's IP address or
the addresses of the
devices behind it.
Only this ISG50 can
initiate the VPN tunnel.
Chapter 24 IPSec VPN
369
Advertisement
Table of Contents
Troubleshooting
