Secure Computing SnapGear Application Note page 18

Setting up SnapGear for VoIP
Using the SnapGear VPN solution
Figure 14: Reciprocal
settings local endpoint ID
Figure 15: Reciprocal
settings remote endpoint
18
This same data shows up as the
VPN Quick Setup, shown in Figure 15. These are reciprocal settings and the
principle is repeated in the remote party's IP address. It is important to
understand that the settings for a VPN tunnel are the same at both ends, but
that the data for local and remote will change places for the far-end SnapGear.
ID
Note:
The sample configuration is unusual in that it forms a dedicated VoIP VPN
circuit between HQ and Branch27 SnapGear units due to the Access all networks
(default gateway) settings used in the Local Network and Remote Network fields.
This is the simplest possible setup and requires no knowledge of the local networks
protected by each SnapGear, but it routes all outbound traffic between HQ and
Branch27. There is no conventional Internet access without additional policy route
configuration. Local Internet access and more granular LAN security can be
achieved by selecting the Custom buttons and entering specific local and remote
networks. Remember, a specific local network on the HQ SnapGear becomes the
reciprocal remote network on the Branch27 SnapGear. Using specific networks
only allows traffic destined for the remote network into the VPN tunnel.
Remote Endpoint ID in the HQ SnapGear
86-0948364-A