Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual download pdf (Page 297)

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

297

Routes provided automatically

Unless any custom routes are deﬁned, the following rules apply to the interchange of routing

information:

• default routes as well as routes to networks with default gateways are not exchanged

(default gateway cannot be changed for remote VPN clients and/or for remote end-

points of a tunnel),

• routes to subnets which are identical for both sides of a tunnel are not exchanged

(routing of local and remote networks with identical IP ranges is not allowed).

• other routes (i.e. routes to local subnets at remote ends of VPN tunnels excluding the

cases described above, all other VPN and all VPN clients) are exchanged.

Note: As implied from the description provided above, if two VPN tunnels are created, com-

munication between these two networks is possible. The traﬃc rules can be conﬁgured so that

connection to the local network will be disabled for both these remote networks.

Update of routing tables

Routing information is exchanged:

• when a VPN tunnel is connected or when a VPN client is connected to the server,

• when information in a routing table at any side of the tunnel (or at the VPN server) is

changed,

• periodically, every 10 minutes. The timeout starts upon each update (regardless of

the update reason).

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

This chapter provides a detailed exemplary description on how to create an encrypted tunnel

connecting two private networks using the Kerio VPN.

This example can be easily customized. The method described can be used in cases where no

redundant routes arise by creating VPN tunnels (i.e. multiple routes between individual private

networks). Conﬁguration of VPN with redundant routes (typically in case of a company with

two or more ﬁlials) is described in chapter 23.6.

Note: This example describes a more complicated pattern of VPN with access restrictions for

individual local networks and VPN clients. An example of basic VPN conﬁguration is provided

in the Kerio WinRoute Firewall — Step By Step Conﬁguration document.

Speciﬁcation

Supposing a company has its headquarters in New York and a branch oﬃce in London. We

intend to interconnect local networks of the headquarters by a VPN tunnel using the Kerio

VPN. VPN clients will be allowed to connect to the headquarters network.

1 2 ... 292 293 294 295 296 297 298 299 300 301 302 ... 367 368

No comments

Kerio Tech KERIO WINROUTE FIREWALL 6 User Manual Page 297