Planet MH-5000 User Manual page 102

MH-5000 User Manual
Step 3. Customize the rule
Check the Active checkbox. Enter a name for
this rule like IKErule. Enter the Local IP
(192.168.40.0/255.255.255.0)
Address
and the
Remote
(192.168.88.0/255.255.255.0). Select the
Outgoing Interface of this Multi-Homing
Security Gateway. Enter the public IP of the
opposite-side VPN gateway (210.2.1.1) in the
Peer's IP Address. Click the ESP Algorithm
and select Encrypt and Authenticate (DES,
Enter the
MD5). Pre-Shared
1234567890. Click the Apply button to store the
settings. Note, In the Action region. It should
choose either
ESP
Algorithm, or system will show error message.
If you hope to set the detailed item of IKE
parameter. Click the Advanced button in this
page. Otherwise it is ok to just leave the value
default.
Active
Status
IKE Rule Name
Local Address
Type
IP Address
Prefix
Len/Subnet
Mask
Condition
Remote
Address Type
IP Address
Prefix
Len/Subnet
Mask
Negotiation
Action
Mode
ADVANCED SETTINGS > VPN Settings > IPSec > IKE > Add
IP Address
as
Key
or
Algorithm AH
FIELD
This field will activate this IPSec policy rule
The name of this IPSec policy
Determine the method to connect to the
remote side of VPN by using the local
subnet or the local single host.
The local IP address
The local IP Netmask
Determine the method to connect to the
local side of VPN by using the remote
subnet or the remote single host.
The remote IP address
The remote IP Netmask
Choose Main or Aggressive mode, see
Chapter 12 for details.
Self local IP
Address
The opposite
side IP
Address
DESCRIPTION
100
Virtual Private Network – IPSec
Range / Format EXAMPLE
Enable/Disable Enabled
text string
(Max:
256 entries)
Subnet Address
/ Single Subnet Address
Address
IPv4 format 192.168.40.0
IPv4 format 255.255.255.0
Subnet Address
/ Single Subnet Address
Address
IPv4 format 192.168.88.0
IPv4 format 255.255.255.0
Main /
Aggressive
Chapter 13
IKErule
Main