McAfee SG310 Administration Manual page 280

VPN menu features
IPSec Advanced Setup wizard
Figure 287 IPSec VPN — Phase 1 Settings page
Fill in the fields.
Allow all of the defaults for the Key lifetime, Rekey margin, and Rekey fuzz fields.
a
Enter the Preshared Secret.
b
Click Next. The Phase 2 Settings page appears
7
Figure 288 IPSec VPN — Phase 2 Settings page
You must specify at least one Local and Remote network pair for the IPSec tunnel. If this is a host-to-host
8
tunnel, you need to explicitly add the local and remote endpoint for the tunnel as a network pair.
Indicate the Local Network that will have access to the remote network. You can select from a list of
a
predefined values based on the current network configuration and existing Definitions, or you can
define custom networks. Custom networks can be specified in the following formats:
• Can be left blank
• Can be an IP address of the form a.b.c.d
• An IP address and a valid netmask specified in either the /24 or 255.255.255.0 format
This example uses 1.1.1.3 for the custom local network.
Indicate the Remote Network that the specified local network should have access to. You can select
b
from a list of predefined values based on the current network configuration and existing Definitions, or
you can define custom networks. Custom networks can be specified in the following formats:
• Can be an IP address of the form a.b.c.d
280 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 288).