Kerio Tech Firewall6 Manual do Utilizador descarregar pdf (Página 336)

100

101

Chapter 21 Kerio VPN

336

5. Create a passive endpoint of the VPN tunnel connected to the London ﬁlial. Use

the ﬁngerprint of the VPN server of the London ﬁlial oﬃce as a speciﬁcation of the

ﬁngerprint of the remote SSL certiﬁcate.

Figure 21.39 Headquarter — deﬁnition of VPN tunnel for the London ﬁlial

On the Advanced tab, select the Use custom routes only option and set routes to the

subnets at the remote endpoint of the tunnel (i.e. in the London ﬁlial).

Warning: In case that the VPN conﬁguration described here is applied see ﬁg-

ure 21.31) it is not recommended to use automatically provided routes! In case

of an automatic exchange of routes, the routing within the VPN is not be ideal (for

example, any traﬃc between the headquarters and the Paris ﬁlial oﬃce is routed via

1 2 ... 331 332 333 334 335 336 337 338 339 340 341 ... 397 398

Comentários a estes Manuais

Sem comentários

Kerio Tech Firewall6 Manual do Utilizador Página 336

Comentários a estes Manuais