Filter
Top Products
SONICWALL SONICOS ENHANCED 2.5 ADMINISTRATOR’S GUIDE
177
Creating Site-to-Site VPN Policies
12
Click the Advanced tab and select any of the following optional settings you want to apply to your
VPN policy.
Select Enable Windows Networking (NetBIOS) broadcast to allow access to remote network
resources by browsing the Windows® Network Neighborhood.
Select Apply NAT Policies if your want the SonicWALL to translate the Local, Remote or both
networks communicating via this VPN tunnel. To perform Network Address Translation on the
Local Network, select or create an Address Object in the Translated Local Network drop-down
box. To translate the Remote Network, select or create an Address Object in the Translated
Remote Network drop-down box. Generally, if NAT is required on a tunnel, either Local or
Remote should be translated, but not both. Apply NAT Policies is particularly useful in cases
where both sides of a tunnel use either the same or overlapping subnets.
To manage the remote SonicWALL through the VPN tunnel, select HTTP, HTTPS, or both from
Management via this SA.
Select HTTP, HTTPS, or both in the User login via this SA to allow users to login using the SA.
If you have an IP address for a gateway, enter it into the Default LAN Gateway (optional) field.
Select an interface from the VPN Policy bound to menu.
13
Click OK.
14
Click Apply on the VPN >Settings page to update the VPN Policies.
Remote SonicWALL
1
Click Add on the VPN > Settings page. The VPN Policy window is displayed.
2
In the General tab, select Manual Key from the IPSec Keying Mode menu.
3
Enter a name for the SA in the Name field.
4
Enter the host name or IP address of the local connection in the IPSec Gateway Name or
Address field.
5
Click the Network tab.
6
Select a local network from Choose local network from list if a specific local network can access
the VPN tunnel. If traffic can originate from any local network, select Any Address. Select Use
this VPN Tunnel as default route for all Internet traffic if all remote VPN connections access
the Internet through this SA. You can only configure one SA to use this setting. Alternatively,
select Choose Destination network from list, and select the address object or group.
7
Click the Proposals tab.