Kerio-tech Firewall6 Bedienungsanleitung PDF herunterladen (Seite 338)

100

101

Chapter 23 Kerio VPN

338

tunnels (so called triangle pattern). This example can be then adapted and applied to any

number of interconnected private networks.

The example focuses conﬁguration of VPN tunnels and correct setting of routing between in-

dividual private networks (it does not include access restrictions). Access restrictions options

within VPN are described by the example in chapter 23.5.

Speciﬁcation

The network follows the pattern shown in ﬁgure 23.31.

Figure 23.31 Example of a VPN conﬁguration — a company with two ﬁlials

The server (default gateway) uses the ﬁxed IP address 63.55.21.12 (DNS name is

gw-newyork.company.com). The server of one ﬁlial uses the IP address 115.95.27.55 (DNS

name gw-london.company.com), the other ﬁlial’s server uses a dynamic IP address assigned

by the ISP.

The headquarters uses the DNS domain company.com, ﬁlials use subdomains

santaclara.company.com and newyork.company.com. Conﬁguration of individual

local networks and the IP addresses used are shown in the ﬁgure.

Common method

The following actions must be taken in all local networks (i.e. in the main oﬃce and both

ﬁlials):

1. WinRoute in version 6.1.0 or higher must be installed at the default gateway. Older

versions do not allow setting of routing for VPN tunnels. Therefore, they cannot be used

for this VPN conﬁguration (see ﬁgure 23.31).

1 2 ... 333 334 335 336 337 338 339 340 341 342 343 ... 403 404

Kommentare zu diesen Handbüchern

Keine Kommentare

Kerio-tech Firewall6 Bedienungsanleitung Seite 338

Kommentare zu diesen Handbüchern