This must match the authentication you used to configure this appliance as the other gateway's remote site. This requires a secure method of remote site authentication and identification. In this scenario, this appliance only responds to the tunnel initiation requests. For example, when the remote site is hidden behind a NAT device. Only remote site initiates VPN - Connections can only be initiated from the remote site to this appliance. The probing method monitors which IP addresses to use for VPN: ongoing or one at a time.Ĭlick New to add an IP address and set a Primary IP address if necessary for High Availability.
When you select this option, you must configure a probing method on the Advanced tab. In High Availability, you can configure one of the IP addresses as the primary. The appliance uses probing to monitor the remote site’s IP addresses. High Availability or Load Sharing - Configure a list of backup IP addresses in case of failure ( High Availability) or to distribute data (Load Sharing). Note - Behind static NAT applies to IPv4 addresses only. If you select IP address, and it is necessary to configure a static NAT IP address, select Behind static NAT and enter the IP address. Host name or IP address - Enter the IP address or Host name. The New VPN Site window opens in the Remote Site tab. Remote Site - Name, connection type, authentication method (preshared secret or certificate), and the Remote Site Encryption Domain.Įncryption - Change the default settings for encryption and authentication details.Īdvanced - Enable permanent tunnels, disable NAT for this site, configure encryption method, and additional certificate matching. When you add a new VPN site, these are the tabs where you configure these details: For more on how to configure site to site VPN, go to VPN > Site to Site Blade Control. In the VPN > Site to Site VPN Sites page you can configure remote VPN sites.
0 kommentar(er)
