A. Create a pre-shared key for IPsec authentication:
gw-world:/> add PSK my_scecret_key Type=ASCII PSKascii=somesecretasciikey
B. Configure the IPsec tunnel:
gw-world:/> add Interface IPsecTunnel ipsec_roaming
LocalNetwork=172.16.1.0/24
RemoteNetwork=all-nets
PSK=my_secret_key
C. Create an IP rule to allow traffic from clients:
gw-world:/> add IPRule Action=Allow
Service=all_services
SourceInterface=ipsec_roaming
SourceNetwork=all-nets
DestinationInterface=lan
DestinationNetwork=172.16.1.0/24
Name=roaming_clients_to_hq
Web Interface
A. Create a pre-shared key object for IPsec authentication:
1.
Go to: Objects > Key Ring > Add > Pre-Shared Key
2.
Now enter:
•
Name: Enter a name for the key, for example
my_secret_key
•
Shared Secret: Enter a secret passphrase
•
Confirm Secret: Enter the secret passphrase again
3.
Click OK
B. Configure the IPsec tunnel object:
1.
Go to: Network > Interfaces and VPN > IPsec > Add > IPsec Tunnel
2.
Now enter:
•
Name: ipsec_roaming
•
Local Network: 172.16.1.0/24
•
Remote Network: all-nets
3.
Under Authentication enter Pre-Shared Key: my_secret_key
4.
Click OK
C. Create an IP rule to allow traffic from clients:
Chapter 9: VPN
709
Summary of Contents for NetDefendOS
Page 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Page 32: ...Chapter 1 NetDefendOS Overview 32 ...
Page 144: ...Chapter 2 Management and Maintenance 144 ...
Page 284: ...Chapter 3 Fundamentals 284 ...
Page 392: ...Chapter 4 Routing 392 ...
Page 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Page 420: ...Chapter 5 DHCP Services 420 ...
Page 573: ...Chapter 6 Security Mechanisms 573 ...
Page 607: ...Chapter 7 Address Translation 607 ...
Page 666: ...Chapter 8 User Authentication 666 ...
Page 775: ...Chapter 9 VPN 775 ...
Page 819: ...Chapter 10 Traffic Management 819 ...
Page 842: ...Chapter 11 High Availability 842 ...
Page 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Page 879: ...Chapter 13 Advanced Settings 879 ...