Cyclades AlterPath BladeManager Manual de instrucciones descargar pdf (Pagina 203)

Appendices 189

The administrator can send a copy of the relevant portions of the ipsec.conf file after the

changes are saved and applied in the Web Manager for the user to insert into the ipsec.conf file

on the user’s workstation.

The authorized user must perform the following to actions enable the IPSec client running on the

user’s workstation to bring up the VPN tunnel to access the subnets where the target devices reside

and then to access the native IP features on the target devices.

• Use the same values used by the administrator to create an IPSec VPN connection profile on

the user’s workstation.

If the administrator sends the relevant portions of the ipsec.conf file from the SP manager’s

IPSec configuration, use it to replace the same section in the workstation’s ipsec.conf file.

• Bring up the IPSec VPN tunnel.

Depending on the platform and IPSec client being used, the user may use a GUI or execute the

ipsec auto -up command. IPSec automatically creates the routes needed to get packets flowing

through the tunnel, so neither the user nor the administrator need to create routes to support

IPSec access to target devices.

• Enable native IP and access the target device’s native features.

See Enabling native IP and accessing a target device’s native features using real IP addresses

for example 2 on page 191.

PPTP VPN configuration for example 2

After the private subnets, target device and user account configuration in Two private subnets and

user configuration for example 2 on page 186 is completed, a VPN connection must be created.

This example describes the configuration steps that must be performed by the SP manager

administrator and by a user on a remote workstation for setting up an PPTP VPN connection that

would enable the authorized user allSps to access sp1, sp2, sp3 and sp4.

The MergePoint 5224/5240 SP manager’s administrator must perform the following to enable the

PPTP client:

• Make sure that the PPTP service is enabled.

• Configure PPTP on the SP manager.

Following are two example address pools:

• PPTP local address pool: 192.168.2.1-10

• PPTP remote address pool: 192.168.3.1-10

NOTE: The address pools’ IP addresses can be assigned arbitrarily. Make sure that none of the addresses

assigned here are being used elsewhere on your network.

Make sure the following are done for the user who needs the PPTP VPN access:

• The user’s account is authorized for native IP access to sp1, sp2, sp3, and sp4.

• The user’s account is configured for PPTP access to the SP manager.

1 2 ... 198 199 200 201 202 203 204 205 206 207 208 ... 239 240

Sin comentarios

Cyclades AlterPath BladeManager Manual de instrucciones Pagina 203