User manual SONICWALL SONICOS ENHANCED 5.6 DYNAMIC ROUTE BASED VPN

[. . . ] Dynamic Route Based Virtual Private Network Document Scope This solutions document provides details about Route Based Virtual Private Network (VPN) Technology, its advantages, and procedures to configure a Dynamic Route Based VPN. This document contains the following sections: · · · "Overview" section on page 1 "Using Dynamic Route Based VPN" section on page 2 "Configuring Routing Protocol for a Tunnel Interface" section on page 4 Overview This section provides an introduction to Route Based VPN. This section contains the following subsections: · · · "What is a Dynamic Route Based VPN?" section on page 1 "Benefits" section on page 2 "Platforms" section on page 2 What is a Dynamic Route Based VPN? In general, a Virtual Private Network (VPN) is a way for companies to have the same security as if all the distributed networks were together, with only one access to the private network, or intranet. [. . . ] With this advantage of the Route Based VPN feature is that it provides flexibility on how traffic is routed. With this feature, users can now define multiple paths for overlapping networks over a clear or redundant VPN. feature, users can now define multiple paths for overlapping networks over a clear or redundant VPN. Platforms The Route Based is a feature is SonicOS on SonicOS 5. 6 Route Based VPNVPNfeature for supported5. 5 Enhanced. Enhanced and higher. Using Route Based VPN Dynamic Route Based VPN Dynamic route based VPN configuration is a two This section contains the following subsections: step process. The first step involves creating a Tunnel Interface. The crypto suites used to secure the traffic between two end-points are defined in the Tunnel · "Configuring Static Route Based VPN" section on page 2 Interface. The second step involves configuring the Routing Protocol for the Tunnel Interface. · This"Configuration Overview" section on page 2 section contains the following subsections: · · · · · · · · "Adding a Tunnel Interface" section on page 3 "Configuration Overview" section on page 2 "Creatinga a Static Route for Tunnel Interface" section on page 4 "Adding Tunnel Interface" section on page 3 "Route Entries for Different Network Segments" section on page 5 "Configuring Routing Protocol for a Tunnel Interface" section on page 4 "Redundant Static Routes for a Network" section on page 6 "Drop Tunnel Interface" section on page 6 Configuration "Creating a Static Route for Drop Tunnel Interface" section on page 7 Overview · Configuring Static Route Based VPN The Tunnel Interface is created when a Policy of type "Tunnel Interface" is added for the remote gateway. The Tunnel Interface must be bound to a physical interface and the IP address of that physical interface is used as the source address of the tunneled packet. For more details about a general tunnel interface configuration, please refer to the SonicOS Enhanced 5. 4 Route based VPN configuration is a two step process. The first step involves creating a Tunnel Interface. Administrator's Guide: http://www. sonicwall. com/ The crypto suites used to secure the traffic between two end-points are defined in the Tunnel Interface. The second step involves creating a static route using Tunnel Interface. Configuration Overview The Tunnel Interface is created when a Policy of type "Tunnel Interface" is added for the remote gateway. The Tunnel Interface must be bound to a physical interface and the IP address of that physical interface is used as the source address of the tunneled packet. A Static Route ties the traffic (source, destination, and service) to the Tunnel Interface. Any number of overlapping static routes can be added for the tunneled traffic. When networks are added or removed from the topology, the static routes only need to be updated accordingly; the tunnel interface configuration does not need to be updated. 2 SonicWALL Route Based VPN Feature Module Using Dynamic Route Based VPN Adding a Tunnel Interface The following procedures explain how to add a Tunnel Interface: Step 1 Step 2 Navigate to VPN>Settings>VPN Policies. [. . . ] Click OK when you have finished configuring the RIP settings. Note If you select the Send and Receive option for RIP, you will have to select the RIP version for each message sent and received. SonicWALL Route Based VPN Feature Module 5 Configuring Routing Protocol for a Tunnel Interface Configuring OSPF for a Tunnel Interface From the Network>Routing>Routing Protocols page, click the Configure OSPF icon. A dialog will appear which will allow you to configure the OSPF for the Tunnel Interface. Click OK when you have finished configuring the OSPF settings. Solution Document Version History Version Number 1 Date 1/5/2010 Notes This document was created by Angela Mendoza. 6 SonicWALL Route Based VPN Feature Module [. . . ]