WatchGuard Technologies SOHO - Manual (Page 101)

User Guide 5.0 101
Frequently asked questions
device. To set up multiple VPN tunnels, you will need to
have at least one WatchGuard Firebox configured with the
WatchGuard VPN Manager.
• Each device must be able to send messages to the other. If
either device has a dynamically assigned Internet (IP)
address (see “Network addressing” on page 37 for an
explanation of dynamic IP addresses), it will not be able to
find its remote counterpart.
• Both devices must be set to use the same encryption method.
The two choices are DES or 3DES. When connecting two
Windows NT networks, the two networks must be in the
same Microsoft Windows domain or be trusted domains.
This is a Microsoft Networking design implementation and
is not a limitation of the SOHO device.
Frequently asked questions
Why do I need a static external address?
To create a VPN connection, one SOHO must be able to find its
partner device. If the addresses were allowed to change, the SOHO
could not find its remote computer.
How do I get a static external IP address?
Contact your ISP. Some systems, like many cable modem systems,
use dynamically assigned addresses to simplify basic installations.
Some providers may also use this feature to discourage users from
creating Web servers. These providers usually offer a static IP
address option.