192 Chapter 6 IP security and VPN300868-G13 Click OK.14 In the main Setup window, select the VPN tunnel and then click Configure.15 Specify the default network to be equal to the connection to the router.16 Clear the PFS check box. NAT is optional.17 Click OK.18 In the main Setup window, click Save and Exit.19 Click Yes to have the changes take effect immediately.20 Click Yes to test the connection (optional).The tunnel is configured. For more information on how to initiate a tunnel after ithas been configured, refer to “How a tunnel is initiated” on page 186.Tunneling to the CES when Instant Internet has a dynamic IPaddressWhen a tunnel is established between the CES and an Instant Internet unit thatgets a dynamic IP address from the ISP, the tunnel is called an aggressive modetunnel. CES 2.6 includes additional support for aggressive mode clients.Instant Internet can send identification information when a connection is madeusing aggressive mode, therefore, CES 2.6 allows Instant Internet to have adynamic IP address. However, the CES never initiates an aggressive modeconnection; all such connections must be initiated from the opposite side of thetunnel.Configuring a VPN between Instant Internet and the CES when Instant Internethas a Dynamic IP address is a two-step process:• Configure the non-Contivity client connection on the CES, (next).• Configure Instant Internet as an aggressive mode VPN tunnel (refer to“Configuring Instant Internet as an aggressive-mode VPN tunnel” onpage 194).
