HP VPN Server Appliance sa3110/sa3150/sa3400/sa3450 Network Layout Reference Guide

Client Scenarios
Hewlett-Packard VPN Server Appliance SA3110/SA3150/SA3400/SA3450 Network Layout Reference Guide
7
Table:
Table:Table:
Table: In Parallel With Firewall Configuration Parameters
In Parallel With Firewall Configuration Parameters In Parallel With Firewall Configuration Parameters
In Parallel With Firewall Configuration Parameters
Bridge
Bridge Bridge
Bridge
Configuration
ConfigurationConfiguration
Configuration
In this scenario, VPN Client traffic is handled either through a
router/bridge or by directly dialing into the PSTN.
• For router/bridge configurations:
— The router/bridge accepts all incoming client traffic then
transfers the traffic to the VPN device.
— The VPN device is set to bridge mode and transfers the
traffic to the local network to which it is attached.
— The VPN device may or may not perform firewall
functions on the traffic.
— The bridge is installed on the internal side of the net-
work with minimal changes to the network topology.
VPN Device (NAT by Router)
VPN Device (NAT by Router)VPN Device (NAT by Router)
VPN Device (NAT by Router) VPN Device (No NAT)
VPN Device (No NAT)VPN Device (No NAT)
VPN Device (No NAT)
Interface E0:
IP: 10.250.128.2 255.255.255.0
Mode: Red
Interface E0:
IP: 205.25.128.2 255.255.255.0
Mode: Red
Interface E1:
IP: 192.168.10.2 255.255.255.0
Mode: Red
Interface E1:
IP: 210.35.129.2 255.255.255.0
Mode: Red
Configuration file entries/
routing info:
security profile remote user
remote tunnel johndoe
security-profile remote
user
client-ip 10.250.128.3
255.255.255.255
Configuration file entries/routing
info:
security profile remote user
remote tunnel johndoe
security-profile remote user
ip route 209.29.128.50
255.255.255.255 johndoe
VPN Client IP: 10.250.128.3 VPN Client IP: Uses ISP IP (no
client IP)
Subnet: 10.250.128.0 (net-
include)
Subnet: 205.25.128.0 (net-include)
ISP IP: 209.29.128.50 ISP IP: 209.29.128.50