Chapter 6 IP security and VPN 183Using the BayStack Instant Internet Management Software Version 7.1113 Choose whether you want to monitor or control the connection by clicking theoption.For more information, refer to “Using Pings” on page 173.14 Enter the IP address of the device that is reachable through the tunnel andrepresentative of the desired connectivity (usually the private address of theremote unit).15 Select the source interface of the connection being monitored or controlled.16 Click OK.17 In the main Setup window, click Save and Exit.18 Click Yes to have the changes take effect immediately (optional).19 Click Yes to test the connection (optional).Understanding how an Instant Internet-to-CES VPN worksThe Instant Internet unit’s VPN capabilities are also designed to establish a tunnelwith a Contivity Extranet Switch (CES) at another location. You can configure anInstant Internet-to-CES VPN regardless of whether you get a static IP address or adynamic IP address from your ISP.When you get a dynamic IP address from your ISP, the tunnel uses aggressivemode. When you get a static IP address from your ISP, the tunnel uses main mode.If an Instant Internet unit that uses dynamic IP addresses establishes a tunnel witha CES, the CES considers the Instant Internet to be a “non-Contivity client.” If anInstant Internet unit that uses static IP addresses establishes a tunnel with a CES,the CES considers the Instant Internet as a branch office. This type of tunneling iscalled branch-to-branch tunneling.General guidelinesFollowing are some general guidelines to keep in mind before you beginconfiguring the VPN.The CES branch-to-branch office mode and non-contivity client modes aresupported.
