User Manual Part 3

Configuring Access Point Security
6-35
If access point #1 has the following values:
• WAN IP address: 20.1.1.2
• LAN IP address: 10.1.1.1
• Subnet Mask: 255.0.0.0
Then, the VPN values for access point #2 should be:
• Remote subnet: 10.1.1.0 or 10.0.0.0
• Remote subnet mask: 255.0.0.0
• Remote gateway: 20.1.1.2
3. If a VPN tunnel has been added to the list of available access point tunnels, use the VPN
Tunnel Config field to optionally modify the tunnel’s properties.
Remote Gateway The Remote Gateway column lists a remote gateway IP address
for each tunnel. The numeric remote gateway is the gateway IP
address on the remote network the VPN tunnel connects to. Ensure
the address is the same as the WAN port address of the target
gateway AP or switch.
Key Exchange Type The Key Exchange Type column lists the key exchange type for
passing keys between both ends of a VPN tunnel. If Manual Key
Exchange is selected, this column displays Manual. If Auto (IKE)
Key Exchange is selected, the field displays Automatic.
NOTE When creating a tunnel, the remote subnet and remote subnet mask must
be that of the target device’s LAN settings. The remote gateway must be
that of the target device’s WAN IP address.
Tunnel Name Enter a name to define the VPN tunnel. The tunnel name is used to
uniquely identify each tunnel. Select a name best suited to that
tunnel’s function so it can be selected again in the future if required
in a similar application.
Subnet name Use the drop-down menu to specify the LAN1 or LAN2 connection
used for routing VPN traffic. Remember, only one LAN connection
can be active on the access point Ethernet port at a time. The LAN
connection specified from the LAN screen to receive priority for
Ethernet port connectivity may be the better subnet to select for
VPN traffic.