Kerio-tech Firewall6 Instrukcja Użytkownika Pobierz pdf (Strona 331)

100

101

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

331

5. Create a passive end of the VPN tunnel (the server of the branch oﬃce uses a dynamic IP

address). Specify the remote endpoint’s ﬁngerprint by the ﬁngerprint of the certiﬁcate of

the branch oﬃce VPN server.

Figure 23.20 Headquarter — deﬁnition of VPN tunnel for a ﬁlial oﬃce

6. Customize traﬃc rules according to the restriction requirements.

• In the Local Traﬃc rule, remove all items except those belonging to the local

network of the company headquarters, i.e. except the ﬁrewall and LAN 1 and

LAN 2.

• Deﬁne (add) the VPN clients rule which will allow VPN clients to connect to LAN 1

and to the network of the branch oﬃce (via the VPN tunnel).

• Create the Branch oﬃce rule which will allow connections to services in LAN 1.

1 2 ... 326 327 328 329 330 331 332 333 334 335 336 ... 403 404

Komentarze do niniejszej Instrukcji

Brak uwag

Kerio-tech Firewall6 Instrukcja Użytkownika Strona 331

Komentarze do niniejszej Instrukcji