![]() ![]() On the X-Series Firewall at Location 1, enable Use Dynamic IPs in the GLOBAL SERVER SETTINGS of the VPN > Settings page for the VPN service to listen on all IP addresses. E nable VPN Listener on the Dynamic IP Address of the Active Peer ![]() For more information, see Certificate Manager. On the VPN > Settings page of both X-Series Firewalls, verify that you selected a valid VPN certificate. This example configuration uses the following settings: T his setup does not require third-party DNS services such as DynDNS. Using 0.0.0.0/0 as the remote gateway is supported only for site-to-site tunnels in Aggressive mode. B ecause t he WAN IP address of Location 1 is chosen dynamically via DHCP, t he remote gateway on Location 2 must use 0.0.0.0/0 so that any incoming IP address is accepted. You will need to add an access rule to allow VPN traffic. In this setup, Location 1 acts as the active peer. To configure a Site-to-Site VPN connection between two Barracuda NextGen X-Series Firewalls, in which one unit (Location 1) has a dynamic Internet connection and the peer unit (Location 2) has a static public IP address, create an IPsec tunnel on both units. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |