Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Configuring VPN Security Associations
Adding or modifying
an IP address
442
9 [Conditional] In the Remote IP field, type the IP address of the remote
client. This field is available only if you select Fixed IP in the Mode field.
10 [Conditional] If you selected Fixed IP in the Mode field, to add or modify an
entry to the Remote Network / IP list, click New or Modify, respectively. This
lists the IP addresses with which a VPN association can be made. The
addresses specified here typically represent a real network located behind
the client’s Sidewinder G2. See “Adding or modifying an IP address” for
details.
11 [Conditional] If you selected Dynamic IP Restricted Client in the Mode field,
to add or modify an entry to the Dynamic Virtual Address Range list, click
New or Modify, respectively. This list defines the range of addresses a client
can use when initiating a VPN connection. The addresses specified here do
not represent a real network but are virtual addresses. With this option the
client assigns their own IP address, although the address must be within
the approved address range.
12 [Optional] In the Comments field, type a short description for this VPN
association.
Note: You must input information from the Authentication tab before you can save
this Security Association entry. See “Configuring password information on the
Authentication tab” on page 443 for instructions.
The Local Network List window is used to define the range of IP addresses that
can be used in a VPN association. To add or modify an IP address, follow the
steps below.
1 In the IP Address field, type the IP address used in this VPN association.
2 In the Number of bits in Netmask field, use the up/down arrows to select
the number of bits that are significant in the network mask. The value
specified is used to identify the network portion of the IP address.
3 Click Add to add the IP address, and then click Close. To exit the window
without adding the IP address, click Close without clicking Add.
Entering information on the Authentication tab
To prevent access to the VPN from Internet hosts masquerading as the VPN
peer, various means of authenticating the peer are available. The
Authentication tab defines the authentication method that will be used in this
VPN association. It also defines the characteristics of the selected
authentication method. You can select four different methods:
• Password—Select this option if you and the remote end want to use a
password to verify the key exchange. The same password must be used on
both ends of this association. See “Configuring password information on
the Authentication tab” on page 443 for detailed information.