McAfee SG310 Administration Manual page 304

VPN menu features
IPSec failover
Table 29 Secondary IPSec tunnel – Branch Office UTM Firewall configuration <Comment>(continued)
Field
Remote party IP address:
Local Network 2
Remote Network 2
Make sure that the secondary tunnel starts successfully.
4
Set up the "primary" GRE tunnel between internet addresses 209.0.0.1and 210.0.0.1. Use the default
5
values unless a specific value is listed in
Table 30 Primary GRE tunnel – Headquarters UTM Firewall configuration
Field
GRE tunnel name
Remote address
Local address
Firewall class
Table 31 Primary GRE unnel – Branch Office UTM Firewall configuration
Field
GRE tunnel name
Remote address
Local address
Firewall class
Set up the "secondary" GRE tunnel between internet addresses 209.0.1.1and 210.0.1.1. Use the default
6
values unless a specific value is listed in
Table 32 Secondary GRE tunnel – Headquarters UTM Firewall configuration
Field
GRE tunnel name
Remote address
Local address
Firewall class
Table 33 Secondary GRE tunnel – Branch Office UTM Firewall configuration
Field
GRE tunnel name
Remote address
Local address
Firewall class
Ensure the GRE tunnels have started correctly
7
Add static routes the the networks that need to be carried over the GRE tunnel. For each network there
8
will be two routes: one for the primary GRE tunnel, and one for the secondary GRE tunnel..
Table 34 Static route 1 – Headquarters UTM Firewall configuration
Field
Target address
Subnet mask
Interface
304 McAfee UTM Firewall 4.0.4 Administration Guide
Value
209.0.0.1
Address of primary port (210.0.1.1/32)
Remote Endpoint
Table 30 or Table
Value
primary
210.0.0.1
209.0.0.1
LAN
Value
primary
209.0.0.1
210.0.0.1
LAN
Table 30 or Table
Value
secondary
210.0.1.1
209.0.1.1
LAN
Value
secondary
209.0.1.1
210.0.1.1
LAN
Value
192.168.2.0
24
primary (GRE Tunnel 1)
31.
31.