Nokia CC500 - VPN - Gateway Connection Manual

Contents

1.3. Configuring SSH Sentinel 91.3 Configuring SSH Sentinel1.3.1 PrerequisitesIt is assumed that a client certificate is already present in SSH Sentinel and that it contains an e-mail addressin the SubjectAltName field. In addition, you need to add the CA certificate under Trusted Certificates- Certification Authorities on the Key Management page. For detailed instructions, see the SSH SentinelUser Manual.The CA certificate properties should be as shown in Figure 1.6 (Certificate properties of the CA certificate)since CRLs are not used in this example configuration:Figure 1.6: Certificate properties of the CA certificate1.3.2 Creating the VPN Rule1. On the Security Policy page of the Policy Editor, select VPN Connections and click Add to create anew VPN connection rule. For detailed instructions, see the SSH Sentinel User Manual. Specify thefollowing values (see Figure 1.7 (The general properties of the VPN connection)):Security gateway: the IP address of the gatewayRemote network: a network that matches the host group that is protcted by the CryptoClustergateway. For example, if the network behind the gateway is 192.168.1.0./255.255.255.0, createVPN with SSH Sentinel and Nokia CryptoCluster c 2002 SSH Communications Security Corp.

/ 11

Related manuals for Nokia CC500 - VPN - Gateway