Chapter 17 VPN
EMG5324-D10A User’s Guide
206
Local Specify the IP addresses of the devices behind the Device that can use the VPN tunnel.
The local IP addresses must correspond to the remote IPSec router's configured
remote IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two
active SAs can have the same local or remote IP address, but not both. You can
configure multiple SAs between the same local and remote IP addresses, as long as
only one is active at any time.
Local Address Type Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start When the Local Address Type field is configured to Single, enter a (static) IP
address on the LAN behind your Device. When the Local Address Type field is
configured to Subnet, enter an IP address on the LAN behind your Device.
End / Subnet Mask When the Local Address Type field is configured to Single, this field is N/A. When
the Local Address Type field is configured to Subnet, enter the subnet of the LAN
behind your Device.
Remote Specify the IP addresses of the devices behind the remote IPSec router that can use
the VPN tunnel. The remote IP addresses must correspond to the remote IPSec
router's configured local IP addresses.
Two active SAs cannot have the local and remote IP address(es) both the same. Two
active SAs can have the same local or remote IP address, but not both. You can
configure multiple SAs between the same local and remote IP addresses, as long as
only one is active at any time.
Remote Address
Type
Use the drop-down menu to choose Single, or Subnet. Select Single for a single IP
address. Select Subnet to specify IP addresses based on the subnet mask.
IP Address Start When the Remote Address Type field is configured to Single, enter a (static) IP
address on the network behind the remote IPSec router. When the Remote Address
Type field is configured to Subnet, enter an IP Address on the LAN behind the IPSec
router.
End / Subnet Mask When the Remote Address Type field is configured to Single, this field is N/A. When
the Remote Address Type field is configured to Subnet, enter the subnet of the LAN
behind the IPSec router.
Address Information
WAN Interface The interface used to connect to the internet
My IP Address My IP Address only shows the IP of the selected interface. There is no need to modify
this information.
Secure Gateway
Address
Type the WAN IP address or the URL (up to 31 characters) of the IPSec router with
which you're making the VPN connection.
If you are not sure of this information you can leave it blank, but do not use 0.0.0.0.
Local ID Select IP to identify this Device by its IP address.
Select DNS to identify this Device by a domain name.
Select E-mail to identify this Device by an e-mail address.
Table 68 Security > VPN > Setup > Edit (continued)
LABEL DESCRIPTION
