iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Figure 5.78 VPN IPSec Properties – IPSec
Host Name or IP Address of Destination Gateway The IP address of your IPSec peer. If
your connection is an IPSec Server, this field will display “Any Remote Gateway”.
Encapsulation Type Select between ‘Tunneling’ or ‘Transport’ encapsulation. ‘Transport’
encapsulation is performed between two gateways (no subnets), and therefore needs no
explicit configuration. ‘Tunneling’ requires that you configure the following parameters:
• Local Subnet Define your local endpoint, by selecting one of the following options:
IP Subnet (default) Enter iPECS SBG-1000’s Local Subnet IP Address and Local
Subnet Mask.
IP Range Enter the ‘From’ and ‘To’ IP addresses, forming the endpoints range of the
local subnet(s).
IP Address Enter the Local IP Address to define the endpoint as a single host.
None Select this option if you do not want to define a local endpoint. The endpoint will
be set to the gateway.
• Remote Subnet This section is identical to the ‘Local Subnet’ section above, but is for
defining the remote endpoint.
Compress (Support IPComp protocol) Select this check box to compress packets
during encapsulation with the IP Payload Compression protocol. Please note that this
reduces performance (and is therefore unchecked by default).
Protect Protocol Select the protocols to protect with IPSec: All, TCP, UDP, ICMP or GRE.
When selecting TCP or UDP, additional source port and destination port drop-down menus
will appear, enabling you to select ‘All’ or to specify ‘Single’ ports in order to define the
protection of specific packets. For example, in order to protect L2TP packets, select UDP and
specify 1701 as both single source and single destination ports.
90