TMS zl Management and Configuration Guide ST.1.2.100916

7-110
Virtual Private Networks
Configure an IPsec Site-to-Site VPN with IKE
Figure 7-94. Example IPsec Site-to-Site VPN
8. For Traffic Selector, configure these settings:
a. For Protocol, specify the protocol for traffic allowed on the VPN:
– Any—Any IP protocol. Select this option when you want to allow
all traffic between local and remote endpoints.
– TCP or UDP—Select this option in conjunction with a remote port
to allow local traffic destined for specific services in the remote
network. Select this option in conjunction with a local port to
allow remote traffic destined for specific services in the local
network.
– ICMP—Select this option when you want to allow only ICMP
traffic.
– IP Protocols—Select one of these Layer 3 protocols, which are
listed by their IANA IP Protocol numbers.
Service objects and service groups will not appear in this list.
b. For Local Address, specify the IP addresses of all local endpoints that
are allowed to send traffic over the VPN (indicated by 2 in the figure).
Do one of the following to specify addresses:
– Select Any to permit any IP address.
– Select the single-entry IP, range, or network address object that
you configured for local endpoints.
Note An address object is not valid for a transport-mode VPN.
– Manually type an IP address, an IP address range, or a network
address in CIDR format.