Summary of vpn, Related requirements for native ip access – Avocent 5240 User Manual

Page 41

Advertising
background image

Chapter 2: Accessing the MergePoint 5224/5240 Appliance and Target Devices 29

...

If the user needs to communicate with target devices on two separate private subnets, the user must
create a route to each private subnet or to each target device.

For example, to communicate with all target devices on a private subnet whose IP address is
192.168.4.0, when the network mask is 255.255.255.0 and the PPTP-assigned IP address for the
MergePoint 5224/5240 SP manager is 192.168.2.1, the following route would be needed:

route add

-

net 192.168.4.0 mask 255.255.255.0 via 192.168.2.1

If additional target devices must be accessed on additional private subnets, additional routes must
be created to each of the subnets.

To communicate with three target devices on a virtual network whose IP address is 172.20.0.0,
whose network mask is 255.255.0.0 via the MergePoint 5224/5240 SP manager and PPTP has
assigned to the MergePoint 5224/5240 SP manager the IP address 192.168.2.1, the user would need
to configure a route like the one shown in the following example:

route add

-

net 172.20.0.0 mask 255.255.0.0 via 192.168.2.1

If a virtual network is configured, the user needs to only add a single network route to the virtual
network. Check with the MergePoint 5224/5240 SP manager’s administrator about which routes
you need to configure to connect to the target devices for which you are authorized.

Creating a default route on the user’s workstation to the MergePoint 5224/5240 SP manager is not
a viable approach. The route would cause the loss of DNS and other local services (such as Internet
and mail service) for the user’s workstation.

Summary of VPN

-

related requirements for native IP access

The following list summarizes the requirements for configuring a VPN connection:

Obtain from the MergePoint 5224/5240 SP manager’s administrator the values used in creating
the VPN connection profile on the MergePoint 5224/5240 SP manager end and use these
values to configure the connection profile on the user’s end. Obtain the PPTP password if
PPTP is being used. If IPSec is being used, the user may obtain the relevant portion of the
MergePoint 5224/5240 SP manager’s ipsec.conf file and insert it into the ipsec.conf file on the
user’s workstation.

Before attempting to access the native IP feature on the MergePoint 5224/5240 SP manager,
the user must start the VPN connection from the user’s workstation.

The MergePoint 5224/5240 SP manager listens for the connection attempt from the IP addresses
specified in its connection profiles and grants the access.

NOTE: The VPN connection must remain active for the duration of the native IP session.

Advertising
This manual is related to the following products: