TMS zl Management and Configuration Guide ST.1.1.100430

7-119
Virtual Private Networks
Configure an IPsec Site-to-Site VPN with IKE
You can specify the address manually or select a previously config-
ured address object. Alternatively, select Any Address.
f. For Destination, specify the remote gateway IP address (either manu-
ally or by specifying a previously configured address object).
Figure 7-101. Add Policy Window
g. Click Apply.
7. Permit traffic from the local endpoints to the remote endpoints:
a. For Action, leave the default, Permit Traffic.
b. For From, select the local zone.
c. For To, select the remote zone.
d. For Service, leave Any Service.
This is the most basic configuration. You could also create access
policies that permit only certain services.
e. For Source, specify the local IP addresses allowed to send traffic on
the VPN.
In the most basic setup, these are the same IP addresses configured
as local addresses in the IPsec traffic selector. You can specify the IP
addresses manually or by selecting a previously configured address
object.