beautypg.com

Setting up config mode – Amer Networks E5Web GUI User Manual

Page 605

background image

with IP addresses and corresponding netmasks, and to exchange other types of information
associated with DHCP. The IP address provided to a client can be either be based on a range of
predefined static IP addresses defined for Config Mode or it can come from DHCP servers
associated with an IP Pool object.

An IP pool is a cache of IP addresses collected from DHCP servers and leases on these addresses
are automatically renewed when the lease time is about to expire. IP Pools also manage
additional information such as DNS and WINS/NBNS, just as an ordinary DHCP server would. (For
detailed information on pools see Section 5.4, “IP Pools”.)

Defining the Config Mode Object

Currently only one Config Mode object can be defined in cOS Core and this is referred to as the
Config Mode Pool object. The key properties associated with it are as follows:

Use Predefined IP Pool Object

The IP Pool object that provides the IP addresses.

Use a Static Pool

As an alternative to using an IP Pool, a static set of IP
addresses can be defined.

DNS

The IP address of the DNS used for URL resolution (already
provided by an IP Pool).

NBNS/WINS

The IP address for NBNS/WINS resolution (already provided
by an IP Pool).

DHCP

Instructs the host to send any internal DHCP requests to
this address.

Subnets

A list of the subnets that the client can access.

Example 9.7. Setting Up Config Mode

In this example, the Config Mode Pool object is enabled by associating with it an already
configured IP Pool object called ip_pool1.

InControl

Follow the same steps used for the Web Interface below.

Web Interface

1.

Go to: Objects > VPN Objects > IKE Config Mode Pool

2.

The Config Mode Pool object properties web page now appears

3.

Select Use a predefined IPPool object

4.

Choose the ip_pool1 object from the IP Pool drop-down list

5.

Click OK

After defining the Config Mode object, the only remaining action is to enable Config Mode to be
used with the IPsec Tunnel.

Chapter 9: VPN

605

This manual is related to the following products: