PLANET MH-2300 - Manual (Page 178)

Gigabit Multi-Homing VPN Security Gateway
MH-2300
178
Group Member
„ The group of trunk rules that are to be applied to a policy.
Configuration
„ Click
Modify or Remove to edit or delete the corresponding rule.
The Trunk Group Table
4.8.1 Examples of VPN
4.8.1.1 Using Two Units of MH-2300 to Establish an IPSec VPN
Tunnel for Private Network Access
Prerequisite Configuration (Note: The IP addresses are used as examples
only.)
Company A: Port 1 is defined as LAN 1 (192.168.10.1) and is connected to the
LAN subnet 192.168.10.x / 24.
Port 2 is defined as WAN 1 (61.11.11.11) and is connected to the
Internet via the ADSL modem (ATUR).
Company B: Port 1 is defined as LAN 1 (192.168.20.1) and is connected to the
LAN subnet 192.168.20.x / 24.
Port 2 is defined as WAN 1 (211.22.22.22) and is connected to the
Internet via the ADSL modem (ATUR).
Port 1 is added with a multiple subnet (192.168.85.1) and is
connected to the LAN subnet 192.168.85.x / 24
This example will be using two units of MH-2300 to establish a VPN tunnel for
private network access as follows:
For Company A, set as shown below:
Step 1. Go to Policy Object > VPN > IPSec Autokey, and then click New
Entry.
The IPSec Autokey Rule Table
Step 2. Enter “VPN_A” in the Name field and select “Port 2 (WAN 1)” for
Interface
The Name and Interface Settings