14 Working with VPNs190 Nokia IP40 Security Platform User’s Guide v1.1network. The IP40 Satellite X is configured through the IP40 GUI Security page to port forwardthe inbound traffic to the defined host.Defining a Backup VPN GatewayYou can define backup VPN gateway to support the main or primary VPN gateway. If theprimary VPN gateway fails, the back up gateway takes over.To define a backup VPN Gateway1. Click VPN from the main menu, and select the VPN Sites tab.2. Click the New Site at the bottom of the page.The VPN Site Wizard page appears.3. Select Site-to-Site VPN, and click Next.The VPN Gateway address page appears.4. Enter the IP address of the primary Check Point management station with enforcementmodule, and click Next.The VPN Network Configuration page appears.5. In the Destination Network text box 1, enter the network address behind the primary CheckPoint management station with enforcement module.Enter 255.255.255.0 as the subnet mask.6. In the Destination Network text box 2, enter the network address behind the secondaryCheck Point management station with enforcement module.Enter 255.255.255.0 as the subnet mask.7. Enter the IP address of the secondary Check Point management station in the BackupGateway field.For information about how to configure the primary and secondary Check Point managementstations, see the Check Point Multiple Entry Point document.Nokia IP40 Satellite X to VPN-1 (Site-to-Site VPN)Nokia IP40 Satellite X to VPN-1 or Check Point v4.1, FP1, FP2, FP3, NG, or NG AIconfiguration enables you to establish site-to-site VPN connections between an IP40 Satellite Xsite-to-site VPN gateway and a VPN-1 site-to-site VPN gateway.NoteIn this solution model, both the VPN-1 and IP40 Satellite X site-to-site VPN gateways musthave a static IP address.Figure 11 on page 191 shows an implementation of the IP40 Satellite X to Check Point VPN-1solution, in which two IP40 Satellite X devices are connected to a VPN-1 site-to-site VPNgateway.
