User Guide

Page 140 SonicWALL Internet Security Appliance User’s Guide
To configure the main office PRO 300, use the following steps:
1. Configure the network settings for the firewall using the Network tab located in the
General section.
2. Click Update and restart the SonicWALL if necessary.
3. Click VPN, then the Configure tab.
4. Create a name for the main office SA, for example, Main Office.
5. Type in the branch office WAN IP address for the IPSec Gateway Address.
6. Create an Incoming SPI using alphanumeric characters.
7. Create an Outgoing SPI using alphanumeric characters.
8. Select Strong Encrypt (ESP 3DES) as the Encryption Method.
9. Write the Encryption Key down or use cut and paste to copy it to a Notepad window.
10. Click Add New Network. Type the IP address, “192.168.22.1” in the Range Start
field. Type the IP address, “192.168.22.255” in the Range End field. This Range End
value is appropriate even if NetBIOS broadcast support is enabled. Leave the subnet
mask field blank. Click Update.
11. Click Advanced Settings and select the features that apply to the SA.
• Enable Windows Networking (NetBIOS) broadcast - if the remote clients use
Windows Network Neighborhood to browse remote networks.
• Apply NAT and firewall rules - to apply NAT and firewall rules to the SA or just
firewall rules if in Standard mode.
• Route all internet traffic through this SA - if forcing internet traffic from the
WAN to use this SA to access a remote site.
• Default LAN Gateway if specifying the IP address of the default LAN route for
incoming IPSec packets for this SA. This is used in conjunction with the Route all
internet traffic through this SA check box.
12. Click OK, and then click Update.
To configure the remote SonicWALL, use the following steps:
1. Configure the network settings for the firewall using the Network tab located in the
General section.
2. Click Update and restart the SonicWALL if necessary.
3. Click VPN, then the Configure tab.
4. Create a name for the remote office SA, for example, Remote Office.
5. Type in the main office WAN IP address for the IPSec Gateway Address.
6. Create an Incoming SPI using alphanumeric characters.
integrated_manual.book Page 140 Friday, October 12, 2001 2:56 PM