beautypg.com

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual

Page 303

background image

23.5 Example of Kerio VPN configuration: company with a filial office

303

Set the IP address 10.1.1.1 as a primary DNS server also for the other hosts.

Note: For proper functionality of DNS, the DNS database must include records for hosts

in a corresponding local network. To achieve this, save DNS names and IP addresses of

local hosts into the hosts file (if they use IP addresses) or enable cooperation of the DNS

module with the DHCP server (in case that IP addresses are assigned dynamically to these

hosts). For details, see chapter

8.1

.

4.

Enable the VPN server and configure its SSL certificate (create a self-signed certificate if no

certificate provided by a certification authority is available).

Note: A free subnet which has been selected is now specified automatically in the VPN

network and Mask entries.

Figure 23.19

Headquarters — VPN server configuration

For a detailed description on the VPN server configuration, refer to chapter

23.1

.