iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Figure 5.105 iPECS SBG-1000 Connection Properties
Click ‘Close’ to go back to the ‘Local Security Settings’ window (see Figure 5.88).
6. Assigning the New IPSec Policy: In the ‘Local Security Settings’ window, right-click the
‘iPECS SBG-1000 Connection’ policy, and select ‘Assign’. A small green arrow will appear
on the policy’s folder icon and its status under the ‘Policy Assigned’ column will change to
‘Yes’.
Figure 5.106 Local Security Settings
5.4.1.5 IPSec Gateway-to-Gateway Connection Scenario
Establishing an IPSec tunnel between Gateways A and B creates a transparent and secure
network for clients from subnets A and B, who can communicate with each other as if they were
inside the same network.
This section describes how to create a gateway to gateway IPSec tunnel with the following
authentication methods:
• Pre-shared Secret – Developed by the VPN Consortium (VPNC). iPECS SBG-1000’s VPN
feature is VPNC certified.
• RSA Signature – A method using an RSA signature that is based on iPECS SBG-1000’s
public key.
• Peer Authentication of Certificates – A method using a Certificate Authority (CA).
This section describes the network configuration of both gateways, followed by the IPSec tunnel
setup methods. The configurations of both gateways are identical, except for their IP addresses
and the use of these addresses when creating the tunnel—the default gateway address of each
gateway should be the WAN IP address of the other gateway.
Note: This section describes the configuration of Gateway A only. The same configuration
must be performed on Gateway B, with the exceptions that appear in the note
admonitions.
106