Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual download pdf (Page 298)

Chapter 23 Kerio VPN

298

The server (default gateway) of the headquarters uses the public IP address 63.55.21.12 (DNS

name is newyork.company.com), the server of the branch oﬃce uses a dynamic IP address

assigned by DHCP.

The local network of the headquarters consists of two subnets, LAN 1 and LAN 2. The head-

quarters uses the company.com DNS domain.

The network of the branch oﬃce consists of one subnet only (LAN). The branch oﬃce

filial.company.com.

Figure 23.13 provides a scheme of the entire system, including IP addresses and the VPN

tunnels that will be built.

Figure 23.13 Example — interconnection of the headquarter and

a ﬁlial oﬃce by VPN tunnel (connection of VPN clients is possible)

Suppose that both networks are already deployed and set according to the ﬁgure and that the

Internet connection is available.

Traﬃc between the network of the headquarters, the network of the branch oﬃce and VPN

clients will be restricted according to the following rules:

1. VPN clients can connect to the LAN 1 and to the network of the branch oﬃce.

2. Connection to VPN clients is disabled for all networks.

3. Only the LAN 1 network is available from the branch oﬃce. In addition to this, only the

WWW, FTP and Microsoft SQL services are available.

4. No restrictions are applied for connections from the headquarters to the branch oﬃce

network.

5. LAN 2 is not available to the branch oﬃce network nor to VPN clients.

1 2 ... 293 294 295 296 297 298 299 300 301 302 303 ... 367 368

No comments

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual Page 298