tailieunhanh - netscreen concepts examples vpns phần 9

hoặc các đường hầm nhiều liên kết đến một giao diện đường hầm. Trong trường hợp này, bạn phải tạo một VPN dựa trên chính sách Chương này cung cấp một giới thiệu về giao thức sử dụng một mình và hỗ trợ cung cấp một cách để một người sử dụng dial-up để làm cho ảo P kết nối đến một máy chủ mạng | Chapter 4 Policy-Based VPNs Tunnel Zones and Policy-Based NAT 2. Network Interfaces Edit for ethernet1 2 Enter the following and then click OK Zone Name Null 3. Network Zones Edit for Untrust In the Virtual Router Name drop-down list select untrust-vr and then click OK. 4. Network Zones New Enter the following and then click OK Name Sales Virtual Router Name trust-vr Interfaces - Zones and Tunnel 5. Network Interfaces Edit for ethernet2 1 Enter the following and then click OK Zone Name Sales IP Address Netmask 24 6. Network Interfaces Edit for ethernet1 2 Enter the following and then click OK Zone Name Untrust IP Address Netmask 24 7. Network Interfaces Tunnel IF New Enter the following and then click OK Tunnel Interface Name Zone Untrust-Tun Fixed IP select IP Address Netmask 24 NetScreen Concepts Examples - Volume 4 VPNs 206 Chapter 4 Policy-Based VPNs Tunnel Zones and Policy-Based NAT MIP 8. Network Interfaces Edit for MIP New Enter the following and then click OK Mapped IP Netmask Host IP Address Host Virtual Router Name trust-vr DIP 9. Network Interfaces Edit for DIP New Enter the following and then click OK ID 5 IP Address Range Start End Port Translation select Addresses 10. Objects Addresses List New Enter the following and then click OK Address Name sales-any IP Address Domain Name IP Netmask select 24 Zone Sales NetScreen Concepts Examples - Volume 4 VPNs 207 Chapter 4 Policy-Based VPNs Tunnel Zones and Policy-Based NAT 11. Objects Addresses List New Enter the following and then click OK Address Name branch1-any IP Address Domain Name IP Netmask Zone Untrust 12. Objects Addresses List New Enter the following and then click OK Address Name branch1-ftp IP Address Domain Name IP Netmask 32 Zone Untrust VPN 13. VPNs AutoKey IKE New Enter the following and then click OK VPN Name to_branch1 Security Level .