Page 71 / 117 Scroll up to view Page 66 - 70
Page 71
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA
l
+1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
smartrg.com
Page 72 / 117
Page 72
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA
l
+1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
smartrg.com
IP Tunnel
IP Tunneling is typically used as a means to establish a path between two independent networks. Your SmartRG gateway sup-
ports connecting islands of IPv6 networks across the IPv4 internet or IPv4 in IPv6 as well.
IPv6inIPv4
After selecting
Advanced Setup -> IP Tunnel -> IPv6inIPv4
from the left navigation bar, click the Add button. The screen shown on
the next page will appear.
1.
Enter a
Tunnel Name
2.
Currently, only the 6rd
Mechanism
is supported
3.
Select the appropriate LAN and WAN interfaces from the drop-down lists associated with the tunnel you wish to estab-
lish.
4.
IPv4 Mask Length, 6rd Prefix with Prefix Length
and
Border Relay IPv4 Address
can be configured automatically. Select
the
Manual
radio button to specify your desired settings for these fields.
Click
Apply/Save
to commit your changes.
Page 73 / 117
Page 73
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA
l
+1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
smartrg.com
IPv4inIPv6
After selecting
Advanced Setup -> IP Tunnel -> IPv4inIPv6
from the left navigation bar, click the
Add
button. The screen shown on
the next page will appear.
1. Enter a
Tunnel Name
2. Currently, only the DS-Lite
Mechanism
is supported.
Consult RFC6333 for further information regarding DS-Lite.
3. Select the appropriate
LAN
and
WAN
interfaces from the drop-down lists associated with the tunnel you wish to establish.
4. AFTR (Address Family Transition Router) may be configured automatically. Select the
Manual
radio button to specify
your desired value for fields.
Click
Apply/Save
to commit your changes.
Page 74 / 117
Page 74
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA
l
+1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
smartrg.com
IPSec
Internet Protocol Security is a protocol for securing communications by packet level encryption and authentication.
Use the
IPSec page to enable and remove connections, or edit existing connections. The
IPSec
configuration screen is dynamic. Some
options are revealed or hidden depending on the selected connection.
After selecting
Advanced Setup -> IP Sec
from the left navigation bar, click the
Add New Connection
. The following screen will ap-
pear. Enter your connection details by completing the appropriate fields.
Click
Apply/Save
to commit your changes.
Page 75 / 117
Page 75
501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA
l
+1 360 859 1780
SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014
smartrg.com
The individual fields on this screen are defined as follows:
Field Name
Description
IPSec Connection Name
A free form text field.
Enter a descriptive name for this connection
IP Version
[IPv4, IPv6] Select the IP version environment associated with your infrastructure.
Tunnel Mode
[ESP
, AH] Select encapsulation method to be used.
Use AH tunnel mode to encapsulate a packet with AH and IP headers. For authenti-
cation, the entire packet is signed.
Use ESP tunnel mode to encapsulate a packet with ESP and IP headers. An ESP
trailer is added to the packet for authentication and integrity.
Local Gateway Interface
Select the WAN connection from the drop-down list to be associated with this tunnel.
Remote IPSec Gateway Address
Enter the he WAN IP for tunnel.
Tunnel Access From Local IP Addresses
[Subnet, Single Address] Select IP information for site A and B.
Subnet indicates entire LAN.
For single host, select Single Address.
Key Exchange Method
[Manual, Auto(IKE)] The default of Auto(IKE) which uses the negotiated key-exchange
method for IPSec is recommended.
Authentication Method
[Pre-Shared Key, Certificate (x.509)] Select the method by which the remote end will
authenticate.
Perfect forwarding Secrecy
[Enable, Disable] When enabled, this setting ensures that a session key derived from
a set of long-term keys will not be compromised if one of the long-term keys is com-
promised in the future.
If desired, use the
Advanced IKE Settings
area to select Phase 1 and Phase 2 specific parameters.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top