ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaja_5.4.0.1/rzajaconfigurevpnoniseriesa.htm

106 lines
7.8 KiB
HTML
Raw Normal View History

2024-04-02 14:02:31 +00:00
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="task" />
<meta name="DC.Title" content="Configure VPN on iSeries-A" />
<meta name="DC.Relation" scheme="URI" content="rzajaboscenario.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajacompletetheplanningworksheets.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajaconfigurevpnoniseriesc.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzajaconfigurevpnoniseriesa" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Configure VPN on iSeries-A</title>
</head>
<body id="rzajaconfigurevpnoniseriesa"><a name="rzajaconfigurevpnoniseriesa"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Configure VPN on iSeries-A</h1>
<div><div class="section">Use the following steps and the information from your worksheets
to configure VPN on iSeries-A:</div>
<ol><li><span>In <span class="keyword">iSeries™ Navigator</span>,
expand <span class="menucascade"><span class="uicontrol">iSeries-A</span> &gt; <span class="uicontrol">Network</span> &gt; <span class="uicontrol">IP Policies</span></span>.</span></li>
<li><span>Right-click <span class="uicontrol">Virtual Private Networking</span> and
select <span class="uicontrol">New Connection</span> to start the New Connection wizard.</span></li>
<li><span>Review the <span class="uicontrol">Welcome</span> page for information
about what objects the wizard creates.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Connection
Name</span> page</span></li>
<li><span>In the <span class="uicontrol">Name</span> field, enter <samp class="codeph">HRgw2FINgw</samp>.</span></li>
<li><span>Optional: Specify a description for this connection group.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Connection
Scenario</span> page.</span></li>
<li><span>Select <span class="uicontrol">Connect your gateway to another gateway</span>.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Internet
Key Exchange Policy</span> page.</span></li>
<li><span>Select <span class="uicontrol">Create a new policy</span> and then select <span class="uicontrol">Balance
security and performance</span>.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Certificate
for Local Connection Endpoint</span> page.</span></li>
<li><span>Select <span class="uicontrol">No</span> to indicate that you will not
be using certificates to authenticate the connection.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Local
Key Server</span> page.</span></li>
<li><span>Select <span class="uicontrol">Version 4 IP address</span> from the <span class="uicontrol">Identifier
type</span> field.</span></li>
<li><span>Select <samp class="codeph">204.146.18.227</samp> from the <span class="uicontrol">IP address</span> field.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Remote
Key Server</span> page.</span></li>
<li><span>Select <span class="uicontrol">Version 4 IP address</span> in the <span class="uicontrol">Identifier
type</span> field.</span></li>
<li><span>Enter <samp class="codeph">208.222.150.250</samp> in the <span class="uicontrol">Identifier</span> field.</span></li>
<li><span>Enter <samp class="codeph">topsecretstuff</samp> in the <span class="uicontrol">Pre-shared
key</span> field</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Local
Data Endpoint</span> page.</span></li>
<li><span>Select <span class="uicontrol">IP version 4 subnet</span> from the <span class="uicontrol">Identifier
type</span> field.</span></li>
<li><span>Enter <samp class="codeph">10.6.0.0</samp> in the <span class="uicontrol">Identifier</span> field.</span></li>
<li><span>Enter <samp class="codeph">255.255.0.0</samp> in the <span class="uicontrol">Subnet mask</span> field.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Remote
Data Endpoint</span> page.</span></li>
<li><span>Select <span class="uicontrol">IP version 4 subnet</span> from the <span class="uicontrol">Identifier
type</span> field</span></li>
<li><span>Enter <samp class="codeph">10.196.8.0</samp> in the <span class="uicontrol">Identifier</span> field.</span></li>
<li><span>Enter <samp class="codeph">255.255.255.0</samp> in the <span class="uicontrol">Subnet mask</span> field.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Data
Services</span> page.</span></li>
<li><span>Accept the default values, and then click <span class="uicontrol">Next</span> to
go to the <span class="uicontrol">Data Policy</span> page.</span></li>
<li><span>Select <span class="uicontrol">Create a new policy</span> and then select <span class="uicontrol">Balance
security and performance</span>. </span></li>
<li><span>Select <span class="uicontrol">Use the RC4 encryption algorithm</span>.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Applicable
Interfaces</span> page.</span></li>
<li><span>Select <span class="uicontrol">TRLINE</span> from the <span class="uicontrol">Line</span> table.</span></li>
<li><span>Click <span class="uicontrol">Next</span> to go to the <span class="uicontrol">Summary</span> page.
Review the objects that the wizard will create to ensure they are correct.</span></li>
<li><span>Click <span class="uicontrol">Finish</span> to complete the configuration.</span></li>
<li><span>When the <span class="uicontrol">Activate Policy Filters</span> dialog
box appears, select <span class="uicontrol">Yes, activate the generated policy filters</span> then
select <span class="uicontrol">Permit all other traffic</span>.</span></li>
<li><span> Click <span class="uicontrol">OK</span> to complete the configuration.
When prompted, specify that you want to activate the rules on all interfaces.</span></li>
</ol>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajaboscenario.htm" title="In this scenario, your company wants to establish a VPN between the subnets of two remote departments through a pair of iSeries computers acting as VPN gateways.">Scenario: Basic branch office connection</a></div>
<div class="previouslink"><strong>Previous topic:</strong> <a href="rzajacompletetheplanningworksheets.htm">Complete the planning worksheets</a></div>
<div class="nextlink"><strong>Next topic:</strong> <a href="rzajaconfigurevpnoniseriesc.htm">Configure VPN on iSeries-C</a></div>
</div>
</div>
</body>
</html>