Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring VPN Security Associations
5 In the Mode field, specify how the remote end is operating. The valid
options are:
• Fixed IP—Select this option if the IP address of the remote end is
always the same. You must also provide the IP address of the remote
end in the Remote IP field.
• Dynamic IP Client—Select this option if the remote end is a device
whose IP address is not fixed. Example: A salesperson that gains
Internet access from a laptop.
• Dynamic IP Restricted Client—Select this option if the remote end is a
device whose IP address is not fixed. Example: A salesperson that
gains Internet access from a laptop. The difference between this option
and Dynamic IP Client is that the remote end is assigned a virtual IP
address from a range specified by using either a Client Address Pool or
a range of acceptable external IP addresses. You restrict the range of IP
addresses available to the remote end by using either the Client
Address Pool field or the Dynamic Virtual Address Range field.
Important:You can only use Dynamic IP Client or Dynamic IP Restricted
Client if automatic key management is used.
6 [Conditional] Determine if you want remote clients to make connections
using only the IP addresses contained within one of the available client
address pools. If so, use the Client Address Pool drop-down list arrow to
select the client address pool you want to use. With this option, the
Sidewinder G2 selects an IP address from the available pool and assigns it
to the client. (This field is available only if you select Fixed IP or Dynamic IP
Restricted Client in the Mode field.)
Note: See “Configuring client address pools” on page 407 for information on
creating a client address pool.
7 In the Local IP field, indicate which IP address to use as the local gateway
by selecting one of the following:
• Use Localhost IP—Select this option to have the Sidewinder G2 assign
the IP address. The Sidewinder G2 uses its routing table to
automatically determine which interface or alias address is associated
with a route to reach the remote gateway.
• Specify IP—Select this option to configure a specific IP address. This IP
address should be one of the Sidewinder G2’s interface or alias
addresses, and that interface must have a route to reach the remote
gateway.
Note: If configuring a VPN for an HA cluster, be sure to use the localhost option
or specify an alias shared by the cluster.
8 To add or modify a local network address to the Local Network/IP list (a list
of network names or IP addresses the Sidewinder G2 can use in a VPN
association), click New or Modify, respectively. See “Adding or modifying an
IP address” for details.
441