Installing Vpn Certificates - Nokia IP40 User Manual

Figure 8 NAT Mode
Non Routable
IP Network-1
Solution A: IP40 Satellite X to VPN-1 (Site-to-Site VPN)
Hosts on Network 1 establish the TCP/IP connection to the external IP address of the IP40
Satellite X site-to-site VPN gateway. The IP40 Satellite X device is configured through the IP40
GUI Security page to port forward the inbound traffic to the defined host.
Solution B: Satellite X to Satellite X (Site-to-Site VPN)
IP40 Satellite X supports the creation of site-to-site VPN connections between two or more IP40
Satellite X devices. Hosts on either network can directly initiate traffic to hosts on the peer
network. The IP40 Satellite X is configured through the IP40 GUI Security page to port forward
the inbound traffic to the defined host.

Installing VPN Certificates

The VPN Certificates are used to authenticate a VPN connection established between Check
Point SmartCenter NG AI using Check Point Large Scale Manager and the dynamically
configured IP40 using DAIP.
The certificate created on the Check Point NG AI can be uploaded on to the IP40 Satellite X.
To upload VPN Certificates and to create a Dynamic VPN Site using Check Point
LSM
1. On the Navigation Bar, click Services > Connect.
The Subscription Services Wizard appears.
2. Enter the IP address of the Check Point NG AI Management station
The Connecting screen appears.
3. Enter the Gateway Id and Registration Key which is used while creating the IP40 Dynamic
Object on the LSM
4. The Connecting Screen appears.
After Connecting the list of Services downloaded is displayed.
5. Click Finish.
6. Click the VPN button on the main menu and select the VPN Certificate tab
7. Click on the VPN Sites tab to see the Dynamic VPN tunnel created between your IP40 and
Check Point NG AI management station
Nokia IP40 User Guide
Initiate VPN Tunnels
Internet
FW-1/ VPN-1
Non Routable
IP Network-2
IP40 Satellite
Site-to-Site VPNs
00407
147