User's Manual

For VPN Server Onl
This parameter is a multiplier factor for tuning VPN management
operations, including key exchange.
Default =10, only change this value by small increments (1-5).
The value should be larger i do not complete (refer to
the VPN statistics section 8.
y.
Network Latency
f key exchanges
4.1).
Note: This setting is set automatically on each VPN client by its VPN
server.
Filters
The VPN filters provide criteria used to
Packets passing through VPN tunnels a
Traffic not matching these filters is disc ed that the 'Block non-VPN Traffic' setting is enabled on the
endpoints of a VPN tunnel (default). Note: If “Block non-VPN Traffic” is disabled, the traffic is forwarded in the
clear.
The “Set to defaults” button sets these
select which packets are sent through VPN tunnels.
re protected with strong encryption.
arded provid
filters based on the device’s current
Ethernet IP configuratio
thernet and the device itself via the VPN.
o default the General VPN Settings (Automatic Start, Operat
n. Filters
are set to forward all local traffic from E
Important Note: “Set to Defaults” will als ing Mode,
Keep Alive Timeout, and Re-Key Timeou
The Filter fields can also be manually co ing through the VPN tunnel. Refer to
section 8.4.1.1 for more details and exam
t).
nfigured to limit the traffic go
ples.
Server List
For VPN Client only.
For units set to VPN client mode, enter t
The Viper unit will attempt to establish a t.
If unsuccessful, it will continue down th
he RF IP address of the VPN server(s) (up to 4 VPN servers).
VPN tunnel connection with the first server on the lis
e list in round-robin manner.
8 VPN Filters
T fields can be ma ed depending on system requirements.
T xamples illustrat s manually.
Example 1
.4.1.1
he VPN filters nually configur
he following e e how to configure the VPN Filter
In this example the source netm 55.255 so only messages originating from
the source IP address 172.30.5
The destination netmask is 255 tined to IP addresses:
192.138.90.1-192.138.90.254 through the VPN tunnel.
The source port range is from 5 llowed
through the VPN tunnel. Destin orts 0 to 0 allow packets to be passed through the
VPN tunnel to any port on 192.138.90.1 to 192.138.90.254
ask is 255.255.2
1.3 will be passed through the VPN tunnel.
.255.255.0 so messages des
will be passed
555 to 6000 so only traffic from these ports will be a
ation p
001-5008-000(Rev8) Page 92