Kerio-tech Firewall6 Bedienungsanleitung PDF herunterladen (Seite 318)

100

101

Chapter 23 Kerio VPN

318

Figure 23.7 VPN tunnel conﬁguration

The passive mode is only useful when the local end of the tunnel has a ﬁxed IP

address and when it is allowed to accept incoming connections.

At least one end of each VPN tunnel must be switched to the active mode (passive servers

cannot initialize connection).

Conﬁguration of a remote end of the tunnel

When a VPN tunnel is being created, identity of the remote endpoint is authenticated

through the ﬁngerprint of its SSL certiﬁcate. If the ﬁngerprint does not match with the

ﬁngerprint speciﬁed in the conﬁguration of the tunnel, the connection will be rejected.

The ﬁngerprint of the local certiﬁcate and the entry for speciﬁcation of the remote ﬁn-

gerprint are provided in the Settings for remote endpoint section. Specify the ﬁngerprint

for the remote VPN server certiﬁcate and vice versa — specify the ﬁngerprint of the local

server in the conﬁguration at the remote server.

1 2 ... 313 314 315 316 317 318 319 320 321 322 323 ... 403 404

Kommentare zu diesen Handbüchern

Keine Kommentare

Kerio-tech Firewall6 Bedienungsanleitung Seite 318

Kommentare zu diesen Handbüchern