Create the Tunnel

The Configuration | System | Tunneling Protocols | IPSec | LAN-to-LAN screen lets you configure, add, modify, and delete IPSec LAN-to-LAN connections between two VPN Concentrators. While the VPN Concentrator can establish LAN-to-LAN connections with other protocol-compliant VPN secure gateways, this section assumes VPN Concentrators on both sides.

The following configurations must be done before the tunnel can be implemented.

• Configure the public interfaces.

• Configure identical basic IPSec parameters on both VPN Concentrators.

• Configure mirror-image private network addresses or network lists on both VPN Concentrators.

You can only configure one LAN-to-LAN connection with each VPN Concentrator (or other secure gateway) peer. The maximum total number of LAN-to-LAN connections supported is determined by the VPN Concentrator model, as shown in the following table.