Specifications

1. General settings

Connection Name SalesReps

Connection Type Wait for the connection (Server Mode)

Settings for PFS Setting, Key Life Time, and Key Replacement

Tries remain unchanged.

2. VPN Connection

The sales representative should have access to the internal network.

The settings for this are as follows:

Local Subnet activate Route a Subnet

Subnet Address 192.168.10.0/24

All dial-up takes place with dynamic IP addresses. Therefore, Road

Warrior is activated.

3. Authentication

Certiﬁcates are used to check access permission. Therefore,

Authenticate with X.509 Certificates is activated.

4. IP Filter

No restrictions should be placed on sales representatives. IP Filter

➝ allow all is activated.

5. Masquerading

No conﬁguration is necessary here.

6. Destination NAT

Since the sales representatives may address all computers in the various

subnets, no rules are required here.

Conﬁguring the Mail Relay

To use this module, you must have a hard disk mounted in the base conﬁgu-

ration and the directory /var must be located on this hard disk. The module

is shown in Figure 3.48 on the facing page.

Internal Mail Server Enter the IP address of the name of your internal mail

server.

Forward following domains Enter the domain names that should be ac-

cepted by the mail relay and forwarded to the mail server.

94 Using the FAS