Digi ConnectPort X4 Guía de usuario descargar pdf (Pagina 82)

Configuration through the web interface

 Local Endpoint:

If the Local Endpoint Type is set to Local endpoint is an internal interface, the

following prompts are displayed:

– Host address for tunnel's internal VPN interface: In the IP Address field, enter the

IP address for the virtual network interface in the IP Address. This is the IP address

which will be visible to devices on the remote private network.

– Discard packets sent to the remote subnet unless they come from this local subnet:

Select this option if the Digi device should discard IP packets transmitted from a device

on the local network and addressed to the remote network which do not come from the

subnet you specify below.

IP Address: Enter the IP address of the subnet.

Subnet Mask: Enter the mask for the subnet.

– As indicated on the settings page, having the local endpoint as an internal interface is

used in combination with NAT. Click here to configure the Network Address

Translation (NAT) settings. Select the interface name of vpn0 to configure NAT for this

tunnel.

If the Local Endpoint Type is set to Local endpoint is a subnet, prompts are displayed

for entering the network address and mask for the private network. Both the Digi unit

and the remote VPN device must be configured to use the same values.

– IP Address: Enter the IP address of the local private network.

– Subnet Mask: Enter the mask for the local private network.

 Remote Endpoint: Enter the IP address and subnet mask of the remote network. Both

the Digi unit and the remote VPN device must be configured to use the same values.

– Tunnel Network Traffic to the following Remote Network:

IP Address: Enter the IP address of the remote network.

Subnet Mask: Enter the subnet mask of the remote network.

Digi devices support a mode of VPN tunnel operation called VPN tunnel all mode,

where all traffic that is not directed to the local subnet is sent across a VPN tunnel to

a remote network. This mode is different from the normal mode of VPN tunnel

operation, where the range of the remote subnet is explicitly set VPN tunnel all

mode is supported when the Digi device is the initiator of the VPN connection. It is

not supported when the Digi device is the server.

For example, in the normal mode of operation, a user might set up a VPN tunnel

between the local subnet at 192.168.1.0/24 to a remote subnet at 172.16.1.0/24. In

this case, the remote subnet range is the subnet at 172.16.1.x. In VPN tunnel all

mode, the remote subnet is any address that is not on the local subnet, or in this case,

anything not in the subnet 192.16.1.x.

The local subnet must be defined as a specific range, for example 192.168.1.0/24.

This is specified in the VPN settings by setting the IP address of the local subnet to

192.168.1.0, and the subnet mask to 255.255.255.0. VPN tunnel all mode is

specified by setting the remote IP address to 0.0.0.0, and the remote subnet mask to

0.0.0.0.

1 2 ... 77 78 79 80 81 82 83 84 85 86 87 ... 270 271

Comentarios a estos manuales

Sin comentarios

Digi ConnectPort X4 Guía de usuario Pagina 82

Comentarios a estos manuales

Relacionado con productos y manuales para Redes Digi ConnectPort X4