User manual

Virtual Private Networking
225
Setup an IPSec tunnel between the primary Internet IP Addresses (192.168.1.0/24 -
209.0.0.1 <-> 210.0.0.1 – 192.168.2.0/24). Default values are used in the configuration
unless otherwise specified below:
Headquarters SG configuration:
Tunnel name: PrimaryLink
Local interface: Internet port
Keying: Aggressive mode (IKE)
Local address: Static IP address
Remote address: Dynamic IP address
Route to remote endpoint: Internet port's gateway
Remote required endpoint ID: primary@branch
Local network: 192.168.1.0/255.255.255.0
Remote network: 192.168.2.0/255.255.255.0
Branch office SG configuration:
Tunnel name: PrimaryLink
Enable this tunnel: Unchecked
Local interface: Default gateway interface
Keying: Aggressive mode (IKE)
Local optional endpoint ID: primary@branch
The remote party's IP address: 209.0.0.1
Local network: 192.168.2.0/255.255.255.0
Remote network: 192.168.1.0/255.255.255.0