Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Example VPN Scenarios
All clients make connections using a virtual IP address assigned
from a client address pool
All clients use VPN client software that supports mode-config
Important: When determining your deployment method, consider what steps will you
take to ensure the protection of your private key material. Allowing unauthorized access to
your private key material could compromise your entire network.
How it is done The following steps show the fields on the VPN menus that must be
defined in order to create this VPN association. The basic idea is to:
— Create a firewall certificate that identifies the Sidewinder G2.
Export this certificate to each client.
— Create a remote certificate that uniquely identifies each client.
Export each certificate to the respective client.
— Create a client address pool.
— Create a VPN association for each client.
1. In the Admin Console, select Services Configuration -> Certificate
Management, and then enter the following information on each tab:
a. On the Firewall Certificates tab, click New and create a firewall
certificate by specify the following:
Certificate Name = MyFirewall_cert
Distinguished Name: CN=MyFirewall,O=bizco,C=US
Submit to CA = Self Signed
Signature Type = RSA
Click Add.
Click the Save icon.
b. [Optional] On the Firewall Certificates tab, click Export and export
the firewall certificate by specify the following:
Destination = File
Export Private Key to File: Click Browse and specify where you
want to save the private key. The private key is often saved to an
accessible location (portable storage device or protected
network) for distribution to the client.
Export Firewall Certificate to File: Click Browse and specify where
you want to save the firewall certificate. The firewall certificate is
often saved to an accessible location (portable storage device or
protected network) for distribution to the client.
Click OK.
Configuring Virtual Private Networks 13-69