106 lines
8.3 KiB
HTML
106 lines
8.3 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="task" />
|
||
|
|
<meta name="DC.Title" content="Configure VPN on Gateway-B" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajaupdscenario.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajaudpplanningworksheets.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzajaudpconfiguresystem-e.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzajaudpconfigurevpn-a" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Configure VPN on Gateway-B</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzajaudpconfigurevpn-a"><a name="rzajaudpconfigurevpn-a"><!-- --></a>
|
||
|
|
<img src="./delta.gif" alt="Start of change" /><!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Configure VPN on Gateway-B</h1>
|
||
|
|
<div><div class="section">Use the information from your worksheets to configure VPN on Gateway-B
|
||
|
|
as follows:</div>
|
||
|
|
<ol><li class="stepexpand"><span>In <span class="keyword">iSeries™ Navigator</span>, expand
|
||
|
|
your <span class="menucascade"><span class="uicontrol">server</span> > <span class="uicontrol">Network</span> > <span class="uicontrol">IP Policies</span></span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Right-click <span class="uicontrol">Virtual Private Networking</span> and
|
||
|
|
select <span class="uicontrol">New Connection</span> to start the Connection wizard.</span></li>
|
||
|
|
<li class="stepexpand"><span>Review the <span class="uicontrol">Welcome</span> page for information
|
||
|
|
about what objects the wizard creates.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Connection
|
||
|
|
Name</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>In the <span class="uicontrol">Name</span> field, enter <samp class="codeph">CHIgw2MINhost</samp>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Optional: Specify a description for this connection group.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Connection
|
||
|
|
Scenario</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol"> Connect your gateway to another host </span>.</span> </li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Internet
|
||
|
|
Key Exchange Policy</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">Create a new policy</span> and then select <span class="uicontrol">Balance
|
||
|
|
security and performance </span>.</span> <div class="note"><span class="notetitle">Note:</span> If you get an error
|
||
|
|
message stating "The certificate request could not be processed" you can ignore
|
||
|
|
it because you are not using certificates for the key exchange. </div>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span>Optional: If you have certificates installed you will see the <span class="uicontrol">Certificate
|
||
|
|
for Local Connection Endpoint</span> page. Select No to indicate that
|
||
|
|
you will be using certificates to authenticate the connection. </span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Local
|
||
|
|
Key Server</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">IP version 4 </span> as the <span class="uicontrol">Identifier
|
||
|
|
type</span> field.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <samp class="codeph">214.72.189.35</samp> from the <span class="uicontrol">IP address</span> field.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Remote
|
||
|
|
Key Server</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">IP version 4 address </span> in the <span class="uicontrol">Identifier
|
||
|
|
type</span> field.</span></li>
|
||
|
|
<li class="stepexpand"><span>Enter <samp class="codeph">146.210.18.51</samp> in the <span class="uicontrol">Identifier</span> field.</span> <div class="note"><span class="notetitle">Note:</span> Gateway B is initiating a connection to a Static NAT you must
|
||
|
|
specify main mode key exchange in order to enter a single IP for the remote
|
||
|
|
key. Main mode key exchange is selected by default when you create a connection
|
||
|
|
with the VPN Connection Wizard. If aggressive mode is used in this situation,
|
||
|
|
a non IPV4 type of remote identifier must be entered fro remote key.</div>
|
||
|
|
</li>
|
||
|
|
<li class="stepexpand"><span>Enter <samp class="codeph">topsecretstuff</samp> in the <span class="uicontrol">Pre-shared
|
||
|
|
key</span> field</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Local
|
||
|
|
Data Endpoint</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">IP version 4 subnet</span> from the <span class="uicontrol">Identifier
|
||
|
|
type</span> field.</span></li>
|
||
|
|
<li class="stepexpand"><span>Enter <samp class="codeph">10.8.0.0</samp> in the <span class="uicontrol">Identifier</span> field. </span></li>
|
||
|
|
<li class="stepexpand"><span>Enter <samp class="codeph">255.255.255.0</samp> in the <span class="uicontrol">Subnet mask</span> field.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Data
|
||
|
|
Services</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Accept the default values, and then click<span class="uicontrol"> Next</span> to
|
||
|
|
go to the Data Policy page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">Create a new policy</span> and then select <span class="uicontrol">Balance
|
||
|
|
security and performance</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Applicable
|
||
|
|
Interfaces</span> page.</span></li>
|
||
|
|
<li class="stepexpand"><span>Select <span class="uicontrol">TRLINE</span> from the Line table.</span></li>
|
||
|
|
<li class="stepexpand"><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Summary</span> page. </span></li>
|
||
|
|
<li class="stepexpand"><span>Review the objects that the wizard will create to ensure they are
|
||
|
|
correct.</span></li>
|
||
|
|
<li class="stepexpand"><span> Click <span class="uicontrol">Finish</span> to complete the configuration. </span></li>
|
||
|
|
<li class="stepexpand"><span>When the <span class="uicontrol">Activate Policy Filters</span> dialog
|
||
|
|
box appears, select <span class="uicontrol">Yes</span>, activate the generated policy
|
||
|
|
filters then select <span class="uicontrol">Permit all other traffic</span>.</span></li>
|
||
|
|
<li class="stepexpand"><span> Click <span class="uicontrol">OK</span> to complete the configuration. </span></li>
|
||
|
|
</ol>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajaupdscenario.htm" title="In this scenario, a large insurance company wants to establish a VPN between a gateway in Chicago and a host in Minneapolis when both networks are behind a firewall.">Scenario: Firewall Friendly VPN</a></div>
|
||
|
|
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzajaudpplanningworksheets.htm">Complete the planning worksheets</a></div>
|
||
|
|
<div class="nextlink"><strong>Next topic:</strong> <a href="rzajaudpconfiguresystem-e.htm">Configure VPN on System-E</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
<img src="./deltaend.gif" alt="End of change" /></body>
|
||
|
|
</html>
|