Page 91 / 139
Scroll up to view Page 86 - 90
LAN-to-LAN VPN using IPsec
Settings for Branch office
1.
Setup interfaces,
System->Interfaces
:
WAN IP:
193.0.2.10
LAN IP:
192.168.4.1
, Subnet mask:
255.255.255.0
2.
Setup IPsec tunnel,
Firewall->VPN:
Under IPsec tunnels click
add new
Name the tunnel
ToMainOffice
Local net:
192.168.4.0/24
Page 92 / 139
92
PSK:
1234567890
(Note! You should use a key that is hard to guess)
Retype PSK:
1234567890
Select Tunnel type:
LAN-to-LAN tunnel
Remote Net:
192.168.1.0/24
Remote Gateway:
194.0.2.20
Enable
Automatically add a route for the remote network
Click
Apply
3. Setup policies for the new tunnel,
Firewall->Policy:
Click
Global policy parameters
Enable
Allow all VPN traffic: internal->VPN, VPN->internal and VPN->VPN
Click
Apply
Page 93 / 139
4. Click
Activate
and wait for the firewall to restart
Settings for Main office
1.
Setup interfaces,
System->Interfaces
:
WAN IP:
193.0.2.20
LAN IP:
192.168.1.1
, Subnet mask:
255.255.255.0
2.
Setup IPsec tunnel,
Firewall->VPN:
Under IPsec tunnels click
add new
Name the tunnel
ToBranchOffice
Local net:
192.168.1.0/24
PSK:
1234567890
(Note! You should use a key that is hard to guess)
Retype PSK:
1234567890
Page 94 / 139
94
Select Tunnel type:
LAN-to-LAN tunnel
Remote Net:
192.168.4.0/24
Remote Gateway:
194.0.2.10
Enable “Automatically add a route for the remote network”
Click
Apply
3.
Setup policies for the new tunnel,
Firewall->Policy:
Click
Global policy parameters
Enable
Allow all VPN traffic: internal->VPN, VPN->internal and VPN->VPN
Click
Apply
4.
Click
Activate
and wait for the firewall to restart
This example will allow
all
traffic between the two offices. To get a more secure solution read
the
A more secure LAN-to-LAN VPN solution
in this chapter.
Page 95 / 139
LAN-to-LAN VPN using PPTP
Settings for Branch office
1.
Setup interfaces,
System->Interfaces
:
WAN IP:
193.0.2.10
LAN IP:
192.168.4.1
, Subnet mask:
255.255.255.0
2.
Setup PPTP client,
Firewall->VPN:
Under PPTP/L2TP clients click
Add new PPTP client
Name the tunnel
toMainOffice
19216811.live