Watchguard SOHO tc Uživatelský manuál stáhnout pdf

Configuring a WatchGuard SOHO to

Firebox II IPSec Tunnel with VPN

Manager 1.0

The capabilities of VPN Manager 1.0 are included with the LiveSecurity System as of

version 4.5. This guide describes how to use the VPN Manager 1.0 (LiveSecurity

System version 4.5) to configure IPSec tunnels between a WatchGuard Firebox II and

WatchGuard SOHO (firmware version 2.3.x).

The following WatchGuard devices support IPSec tunnels:

• WatchGuard Firebox II, Firebox II Plus, Firebox II FastVPN

• WatchGuard SOHO with VPN Feature Key

• WatchGuard SOHO|tc

Version 2.3.x of the SOHO firmware, together with VPN Manager 1.0 allow the

creation of two types of SOHO tunnels: Telecommuter and SOHO. Use of VPN

Manager for tunnel configuration also enables a WatchGuard SOHO to be connected

to the Internet using either a static or dynamic IP address.

NOTE

In the following documentation, “Firebox II” is used to refer to the Firebox II family of WatchGuard

firewalls, which includes the Firebox II, Firebox II Plus, and Firebox II FastVPN.

Creating An Internet Distributed Enterprise

Dynamic VPN Configuration Protocol (DVCP) is the WatchGuard-proprietary

protocol that enables you to easily create a network of your branch offices,

commuters and mobile workers using the Internet. WatchGuard refers to such a

network as the Internet Distributed Enterprise (IDE). In an IDE, the Firebox II sits as

the center point in a distributed array of WatchGuard SOHO and SOHO|tc clients

(and/or Firebox IIs).

1 2 3 4 5 6 7 8

Shrnutí obsahu

Strany 1 - Manager 1.0

Configuring a WatchGuard SOHO to Firebox II IPSec Tunnel with VPN Manager 1.0The capabilities of VPN Manager 1.0 are included with the LiveSecurity Sy

Strany 2 - Types of SOHO Tunnels

2 WatchGuard SOHO with VPN Manager 2.0How Does DVCP Work?The DVCP option allows the Firebox II to act as a DVCP server. All the policy information in

Strany 3 - 2Click Add; click Next

IPSec Tunnel Configuration 3Creating a Tunnel to a SOHO Client2Click Add; click Next.3 Enter a distinctive name for the DVCP client. Enter the shared

Strany 4

4 WatchGuard SOHO with VPN Manager 2.05 Select SOHO Private Network if you will create a SOHO tunnel; select Telecommuter IP Address if you will crea

Strany 5 - IPSec Tunnel Configuration 5

IPSec Tunnel Configuration 5Configuring the SOHO Device for DVCPthe SOHO client may need to be restarted in order to refresh their DHCP assigned IP ad

Strany 6 - Configuring a SOHO Tunnel

6 WatchGuard SOHO with VPN Manager 2.0From the Management Station of the SOHO device:1 With your Web browser, go to the SOHO Configuration Settings p

Strany 7 - IPSec Tunnel Configuration 7

IPSec Tunnel Configuration 7Configuring the SOHO Device for DVCPconfigure a SOHO device for IPSec tunnels using DVCP, have the following information a

Strany 8

8 WatchGuard SOHO with VPN Manager 2.09 Review the settings. Click Reboot.The SOHO contacts the DVCP Server and obtains its IPSec tunnel configuratio