SSG5 VPN LAN-to-LAN Tunneling HOWTO

Bridge Mode

Bridge Mode

** This configuration is based on PPPoE dialing from SSG5, Modem will be on bridge mode.

SSG5 on HQ Configuration

PPPoE CONFIG

Tunnel CONFIG

Define the interfaces by selecting Network> Interfaces from the left panel menu. The tunnel interface is created by selecting Tunnel IF from the drop down menu then Cliking New

Network Interface List

Destination Routing List

AUTOKEY IKE GATEWAY CONFIG

AUTOKEY IKE GATEWAY CONFIG (Advanced)

AUTOKEY IKE CONFIG

AUTOKEY IKE CONFIG (Advanced)

SSG5 on Branch Configuration

PPPoE CONFIG

Network Interface List

Tunnel CONFIG

Define the interfaces by selecting Network> Interfaces from the left panel menu. The tunnel interface is created by selecting Tunnel IF from the drop down menu then Cliking New

AUTOKEY IKE GATEWAY CONFIG

AUTOKEY IKE GATEWAY CONFIG (Advanced)

AUTOKEY IKE CONFIG

AUTOKEY IKE CONFIG (Advanced)

Destination Routing

END

ConclusionThese Application Notes have described the administration steps required to configure a Route-Based Site-to-Site VPN tunnel between the HQ and the Branch site.

VerificationUse “ping” from a PC to verify traffic can traverse through the VPN tunnel. PC fromeither the HQ or Branch network should be able to ping another PC on the oppositeside of the VPN tunnel.

rhisyam at gmail dot com