Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 14: Configuring Virtual Private Networks
Example VPN Scenarios
2 In the Admin Console, VPN Configuration > Client Address Pools, and
then click New to create a new client address pool.
Using a client address pool lets you define which local networks the clients
can access. For this example, assume you want to permit access to the
250.1.1.0 network but not the 192.168.182 network.
Note: Your client software must support this capability. SafeNet SoftRemote
currently does not support this capability—it must be manually configured with
information about the locally protected subnet.
a Enter New Pool Name = SalesPool
b Virtual Subnet = 10.1.1.0/24
c Click New. In the Local Subnet field, enter 250.1.1.0/24 and then click
Add.
d Click Add to add the new pool.
Note: The IP Address and Number of Bits in Netmask fields work in concert to
determine the network portion of the addresses in the pool as well as the total
number of addresses in the pool. The values shown here provide 254 possible
addresses: 10.1.1.0–10.1.1.255. Modify these two values as appropriate for
your situation.
e On the Servers tab:
If the client software you are using supports this mode-config capability,
specify your internal DNS and WINS servers here.
f Click Add.
g Click the Save icon to save your changes.
3 In the Admin Console, VPN Configuration > Security Associations, and
then click New to configure a new association.
a On the General tab:
• Name = Large_scale_sales
• Encapsulation = Tunnel
• Mode = Dynamic IP Restricted Client
• Enabled = Yes
• Burb = Virtual
• Local IP = localhost
• Client Address Pool = VPNPool
b On the Authentication tab:
• Authentication method = Certificate + Certificate Authority
• Firewall Certificate = BizcoFW_by_CA (created in step 1B)
• Certificate Authorities = BizcoCA (created in step 1A)
• Remote Identities = Sales_force (created in step 1C)
c On the Crypto tab: Order the algorithms to match that of the client.
459