Kerio Tech Firewall6 User Manual
Page 324
Chapter 23
Kerio VPN
324
networks). Configuration of VPN with redundant routes (typically in case of a company with
two or more filials) is described in chapter
Note: This example describes a more complicated pattern of VPN with access restrictions for
individual local networks and VPN clients. An example of basic VPN configuration is provided
in the Kerio WinRoute Firewall — Step By Step Configuration document.
Specification
Supposing a company has its headquarters in New York and a branch office in London. We
intend to interconnect local networks of the headquarters by a VPN tunnel using the Kerio
VPN. VPN clients will be allowed to connect to the headquarters network.
The server (default gateway) of the headquarters uses the public IP address 63.55.21.12 (DNS
name is newyork.company.com), the server of the branch office uses a dynamic IP address
assigned by DHCP.
The local network of the headquarters consists of two subnets, LAN 1 and LAN 2. The head-
quarters uses the company.com DNS domain.
The network of the branch office consists of one subnet only (LAN). The branch office
filial.company.com
.
Figure
provides a scheme of the entire system, including IP addresses and the VPN
tunnels that will be built.
Figure 23.12
Example — interconnection of the headquarter and
a filial office by VPN tunnel (connection of VPN clients is possible)