Westermo RedFox Series - Manual (Page 871)

Westermo OS Management Guide
Version 4.17.0-0
WeConnect utilises these standard features in WeOS for its operations:
❼ SSL VPN - This is used for the encrypted tunnel that connects to your We-
Connect secure network.
❼ RIP - This protocol is run inside the SSL VPN tunnel to receive routes from
other units and networks in the secure network. It also announces the local
networks on your unit so they can be reached remotely.
❼ Firewall - Automatic forward rules for the WeConnect SSL VPN tunnel are
added. It is recommended that you use the firewall, but not mandatory.
The SSL VPN tunnel is run in UDP mode. This makes the WeConnect service
perform well on most types of Internet connections. There is no requirement
of fixed public IP number for your unit, and accessing the Internet via external
firewalls and NAT will work in most cases.
Note
WeConnect is using the IPv4 networks 198.18.0.0/16 and 198.19.0.0/16
internally for its operation. You can not use these networks, or subnets
within these networks, for other purposes on your WeOS unit while using
WeConnect.
➞ 2015 Westermo Teleindustri AB 871