TMS zl Management and Configuration Guide ST.1.1.100226

7-223
Virtual Private Networks
Configure a GRE over IPsec VPN with IKE
Figure 7-186. Example GRE over IPsec VPN
6. For Local Gateway, specify the same IP address configured as the source
IP address for the GRE tunnel (indicated by 1 in the figure and not the IP
address on the tunnel subnet). You have two options:
• Select IP Address and type the IP address in the box.
• Select Use VLAN IP Address and select a VLAN from the list.
You must select the VLAN that has the IP address that is the GRE
tunnel’s source IP address.
Note Later you will configure firewall access policies to allow the TMS zl
Module to send IKE messages to the remote gateway.
7. For Remote Gateway, specify the actual IP address or fully qualified domain
name (FQDN) of the remote tunnel gateway:
• Select IP Address (Peer ID) and type the IP address in the box.
You must type the IP address specified as the destination IP address
for the GRE tunnel (indicated by 3 in the figure and not the IP address
on the tunnel subnet).
• Select Name and type the FQDN in the box.
The TMS zl Module must be able to resolve the FQDN to the remote
gateway’s accessible IP address. (Make sure that you have configured
a DNS server.)