Configure a VPN connection on iSeries A for remote clients

After configuring and starting the L2TP receiver connection profile for iSeries™ A, the administrator needs to configure a VPN to protect the connection between remote clients and the network in branch sales office.

To configure a VPN for remote clients, complete these steps:

Important: IP addresses used in this scenario are meant for example purposes only. They do not reflect an IP addressing scheme and should not be used in any actual configuration. Use your own IP addresses when completing these tasks.

In iSeries Navigator, expand iSeries A > Network > IP Policies.
Right-click Virtual Private Networking and select New Connection to start the VPN New Connection wizard. Review the Welcome page for information about what objects the wizard creates.
Click Next to go to the Connection Name page.
In the Name field, enter SalestoRemote.
Optional: Specify a description for this connection group. Click Next.
On the Connection Scenario page, select Connect your host to another host. Click Next
On the Internet Key Exchange Policy page, select Create a new policy, and then select Highest security, lowest performance. Click Next.
On the Certificate for Local Connection Endpoint page, select No. Click Next.
On the Local Key Server page, select Version 4 IP address as the identifier type. The associated IP address should be 192.168.1.2. Click Next.
On the Remote Key Server page, select Any IP address in the Identifier type field. In the Pre-shared key field, enter mycokey. Click Next.
On the Data Services page, enter 1701 for the local port, select 1701 for the remote port, and select UDP for the protocol. Click Next.
On the Data Policy page, select Create a new policy and then select Highest security, lowest performance. Click Next.
On the Applicable Interfaces page, select ETHLINE. Click Next.
On the Summary page, review the objects that the wizard will create to ensure they are correct.
Click Finish to complete the configuration. When the Activate Policy Filters dialog box window appears, select No, packet rules will be activated at a later time. Click OK.