Chapter 6 IP security and VPN 177Using the BayStack Instant Internet Management Software Version 7.1110 Select the interface used to initiate the ping. The default source is the IPaddress of the interface that is closest to the destination.11 Click OK to close the Ping configuration dialog box.12 Click OK to close the Pings dialog box.13 Click Save and Exit.14 Click Yes to have the changes take effect immediately (optional).15 Click Yes to test the connection (optional).Understanding how an Instant Internet-to-Instant InternetVPN worksThe Instant Internet unit’s VPN capabilities are designed to establish a securetunnel with another Instant Internet unit at a different location. When youestablish a VPN between two Instant Internet units, you can decide what types ofconnection you want to allow to your unit. This option provides you with anothermeans for selecting the level of security necessary.You may specify whether or not you want to allow strictly incoming or outgoingconnections to establish a tunnel. You may also specify to allow both incomingand outgoing connections to establish a tunnel.Allowing only incoming connectionsYou select this option to allow incoming connections only to establish a tunnel.Use this feature when connecting with a remote site that has a dynamic IP addressor is a third-party IPsec client.To allow only incoming connections to establish a tunnel:1 Start Setup, and if prompted, select a unit to configure.2 Click Add.3 In the Select Connection Type dialog box, click IPsec.4 In the Select Connection Device dialog box, click BayStack II.5 In the Select Type of Connections dialog box, click Incoming only.The IPsec Configuration dialog box opens (Figure 90).
