background image

 

7. Firewall B – IPsec interface 

Go to 

Interfaces -> IPsec

 
Add a new 

IPsec Tunnel

 
In the 

General

 tab: 

 
General: 

Name

fwA-ipsec 

Local Network

lannet 

Remote Network

fwA-remotenet 

Remote Endpoint

fwA-remotegw 

 

Encapsulation Mode

Tunnel

 

 
Algorithms: 

 

IKE Algorithms

High

 

IKE Life Time

28800 

IPsec Algorithms

High

 

IPsec Life Time

3600

 

IPsec Life Time

 

In the 

Authentication

 tab: 

 

Authentication: 

Select 

Pre-Shared Key

 and 

fwA-psk. 

 

Click 

Ok

 

8. Firewall B – Rules 

Go to 

Rules -> IP Rules

 
Create a new 

IP Rules Folder

 called 

lan_to_fwA-ipsec 

 

In the new folder, create a new 

IP Rule

Summary of Contents for NetDefend DFL-1600

Page 1: ...cked expanded and then Address Book Most of the examples in this document are adapted for the DFL 800 The same settings can easily be used for all other models in the series The only difference is the names of the interfaces Since the DFL 1600 and DFL 2500 has more than one lan interface the lan interfaces are named lan1 lan2 and lan3 not just lan The screenshots in this document is from firmware ...

Page 2: ...How to configure IPSec VPN LAN to LAN Tunnel Create one lan to lan IPsec VPN tunnel between firewall A and B ...

Page 3: ...wan1net to 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP address Name fwB remotenet IP Address 192 168 2 0 24 Click Ok In the same folder add a new IP address Name fwB remotegw IP Address 192 168 110 2 Click Ok 2 Firewall A Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwB psk ...

Page 4: ... shared secret Click Ok 3 Firewall A IPsec interface Go to Interfaces IPsec Add a new IPsec Tunnel In the General tab General Name fwB ipsec Local Network lannet Remote Network fwB remotenet Remote Endpoint fwB remotegw Encapsulation Mode Tunnel ...

Page 5: ...ec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwB psk Click Ok 4 Firewall A Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwB ipsec In the new folder create a new IP Rule In the General tab General ...

Page 6: ...tion Interface fwB ipsec Destination Network fwB remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwB ipsec Source Network fwB remotenet Destination Interface lan Destination Network lannet Click Ok ...

Page 7: ...o 192 168 110 0 24 Go to Objects Address book Add a new Address Folder called RemoteHosts In the new folder add a new IP4 address Name fwA remotenet IP Address 192 168 1 0 24 Click Ok In the same folder add a new IP4 address Name fwA remotegw IP Address 192 168 110 1 Click Ok 6 Firewall B Pre shared keys Go to Objects Authentication Objects Add a new Pre Shared Key General Name fwA psk Shared secr...

Page 8: ...Endpoint fwA remotegw Encapsulation Mode Tunnel Algorithms IKE Algorithms High IKE Life Time 28800 IPsec Algorithms High IPsec Life Time 3600 IPsec Life Time 0 In the Authentication tab Authentication Select Pre Shared Key and fwA psk Click Ok 8 Firewall B Rules Go to Rules IP Rules Create a new IP Rules Folder called lan_to_fwA ipsec In the new folder create a new IP Rule ...

Page 9: ...ce fwA ipsec Destination Network fwA remotenet Click Ok Create a second rule in the same folder In the General tab General Name allow_all Action Allow Service all_services Address Filter Source Interface fwA ipsec Source Network fwA remotenet Destination Interface lan Destination Network lannet Click Ok Save and activate the configuration on firewall B ...

Reviews: