User's Manual Part 4

Page 48 SonicWALL SonicOS Standard Administrator’s Guide
If VPN Single-Armed Mode (stand-alone VPN gateway) is enabled, a warning message appears as
follows:
Click OK to enable the SonicWALL in VPN Single Armed Mode.
Configuring a SonicWALL for VPN Single Armed Mode
You have the following information to configure the IP addresses on the firewalls:
To configure a SonicWALL in VPN Single Armed Mode in front of an existing SonicWALL, follow these
steps:
1. Configure the Remote and Local SonicWALLs in your preferred networking mode.
2. Configure a VPN SA using IKE and Pre-shared Secret on the Remote SonicWALL using the VPN
WAN IP address as the IPSec Gateway, and the Local SonicWALL WAN IP address as the
Destination Network.
3. Configure a Static Route on the Local SonicWALL to send network traffic destined for the Remote
SonicWALL to the VPN SonicWALL.
4. Configure the VPN SonicWALL in Standard networking mode.
5. Click Advanced, then Intranet. Select the VPN Single Armed Mode (stand alone VPN gateway)
check box, and click Update.
6. A rule is automatically added to the VPN SonicWALL for HTTPS management from the WAN. The
LAN port is disabled when you configure a SonicWALL for VPN Single Armed mode.
7. Configure a VPN SA using IKE and Pre-shared Secret on the VPN SonicWALL to securely connect
to the Remote SonicWALL. Enter the Remote SonicWALL WAN IP address as the IPSec Gateway
and the Remote SonicWALL LAN IP Address range as the Destination Network, if configuring “Many
to One NAT”.
8. Click Advanced, and then Routes. Enter the Corporate SonicWALL WAN IP address in the Dest.
Network field. Enter the subnet mask in the Subnet Mask field. Enter the Local SonicWALL WAN IP
address as the Gateway, and select WAN from the Link menu. Click Update.
Remote SonicWALL
Corporate SonicWALL
WAN IP Address: 66.120.118.11 WAN IP Address:66.120.118.25
Subnet Mask: 255.255.255.0 Subnet Mask: 255.255.255.0
LAN IP Address 192.168.1.1 LAN IP Address: 192.168.3.1
Subnet Mask: 255.255.255.0 Subnet Mask: 255.255.255.0
VPN Single Armed Mode SonicWALL
WAN IP Address: 66.120.118.13
Subnet Mask: 255.255.255.0
LAN IP Address: 192.168.2.1
Subnet Mask: 255.255.255.0