RuggedCom RuggedRouter RX1100 - Manual (Page 154)

16. Configuring IPsec VPN
Revision 1.14.3 154 RX1000/RX1100™
16.2.8.2. Left/Right System's Settings
Figure 16.10. Editing A VPN Connection, Part 2
The Public IP address fields determine the IP address of the side of the connection being edited.
Check the Address or hostname.. field and provide a fixed IP address or hostname. If this side
reflects a remote client whose IP address changes, select Automatic (%any). Use From default
route if the host's IP is dynamically assigned.
The System identifier fields provide IPsec with a way to determine which section of the connection
applies to which host. Left to Default the parameter will use the public IP address from above. Set to
None, the router will use an empty id. You can override these with an IP address or hostname.
The Private subnet behind system fields determine if this system has an internal network connected
to it that the other host should be granted access to. Enter an IP network address and mask into this
field. If you enter a subnet of 0.0.0.0/0 in this field, this connection will serve as a default route for
all traffic.
The System's public key fields provide an RSA key if RSA keying is to be used. If you want to use
secret keying, select None. When you first create a connection, this field is filled in for you with the
local system's RSA key. If you are filling in this field for the remote system, the key can be obtained
from the Show Public Key page on that system. Select Certificate File and provide a certificate if
using X.509 certificates.
The Next hop to other system fields determine the address to forward traffic to in order to reach the
other system. Unless you have an unusual network setup, this field should be set to Default route.
Note
If you set Next hop to other system to “default”, you must configure a default route. You can
check for the existence of a default route with the Network Configuration menu, Current Routing
& Interface Table icon . A default route will be indicated by a “default” in the Destination column.
16.2.8.3. Export Configuration
Selecting the “Export Configuration” button provides a means to capture the connection specification
in such a way as to be importable at the remote router.