Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Example VPN Scenarios
452
• Remote IP = 100.1.1.1
• Client Address Pool =
• Local Network / IP = 250.1.1.0/24
• Remote Network / IP = 50.1.0.0/16
Note: When configuring the Sidewinder G2 named fw.west.example.com, the
Local Network/IP and the Remote Network/IP values are reversed and the
Remote IP value is 200.1.1.1.
2 On the Authentication tab:
• Authentication method = password
• Enter password = samplepassword
• Verify password = samplepassword
3 On the Crypto tab: Order the algorithms to match that of the other
Sidewinder G2.
4 On the Advanced tab: No changes needed.
5 Click Add to save the new VPN security association.
6 Click the Save icon.
Summary
And that is it. The VPN can be used as soon as the other Sidewinder G2 is
configured. The same type of information is entered at the other Sidewinder
G2, changing the IP addresses as appropriate.
Scenario 2: Simple deployment of remote users
A common reason for using a VPN is to allow your travelling employees to
connect to your corporate network from a remote site. This connection is
typically made between an employee’s laptop computer and your corporate
Sidewinder G2. In this type of VPN association, single (also known as “selfsigned”)
certificates are generated by the Sidewinder G2 and distributed to
each client. This type of VPN can be used with dynamic IP-assigned clients
and gateways. One association must be created for each client, so this type of
VPN is typically used only if you have a small number of remote clients.
The following figure provides the sample configuration information used in this
scenario. Note that the remote end of this VPN connection (from the
Sidewinder G2 point of view) is a laptop that will be using a dynamic IP
address.