Differences
This shows you the differences between two versions of the page.
|
vpn:branches [2010/11/01 16:16] tibor created |
vpn:branches [2010/11/22 12:53] (current) mats |
||
|---|---|---|---|
| Line 6: | Line 6: | ||
| </if> | </if> | ||
| - | To create an equal connection between say two branch offices each having its Internet Gate set up both Internet Gate -s as a non-EasyClient client to the other. | + | To create an equal (symmetric, non-client-server style) connection between say two branch offices, each having its Internet Gate, set up them as a non-[[vpn:easyclient|EasyClient]] client to the other respectively. |
| - | Both Internet Gate -s need to have static global IP addresses. | + | Both Internet Gates need to have static global IP addresses. |
| - | Both Internet Gate -s need to have different subnets for ET1. | + | Both Internet Gates need to have different subnets for ET1. |
| - | On both Internet Gate -s: | + | On both Internet Gates: |
| - | - Make sure the unit has a different subnet for ET1 than the other one. If not change ET1 subnet on the Network Configuration page. | + | - Make sure the unit has a different subnet for ET1 than at the other (ET1 subnet) end. If needed, change ET1 subnet on the [[web_gui:network_page|Network Configuration]] page. |
| - | - Click Add in the VPN Connections field on the IPSec Overview page. | + | - Click Add in the **VPN Connections** field on the [[web_gui:vpn_page|IPSec Overview]] page. |
| - | - On the IPSec Settings page that appears, disable Act as EasyClient . | + | - On the IPSec Settings page that appears, disable **Act as EasyClient** . |
| - | - Enter the global IP address of the other Internet Gate in the Remote Gateway IP Address field. | + | - Enter the global IP address of the other Internet Gate in the **Remote Gateway IP Address** field. |
| - Enter the same pre-shared key or certificate. | - Enter the same pre-shared key or certificate. | ||
| - Enter the local subnet used at ET1 behind the other Internet Gate. | - Enter the local subnet used at ET1 behind the other Internet Gate. | ||
| - Click Apply. | - Click Apply. | ||
| - | Now all PC-s connected to ports ET1/2/3 of one Internet Gate can connect to all PC-s connected to ports ET1/2/3 of the other Internet Gate. To be able to use port ET4 or AIR the connections need to be tweaked on the advanced pages. | + | Now all PC:s connected to ports ET1/2/3 of one Internet Gate can connect to all PC:s connected to ports ET1/2/3 at the other end. To be able to use port ET4 or AIR the connections need to be tweaked on the [[web_gui:vpn_advanced|advanced pages]]. |
| - | :!: Both Internet Gate -s must have static IP addresses. | + | :!: Both Internet Gates must have static IP addresses. |
