Kerio-tech Firewall6 Manuel d'utilisateur télécharger pdf (Page 329)

100

101

23.5 Example of Kerio VPN conﬁguration: company with a ﬁlial oﬃce

329

• Set the IP address of this interface (10.1.1.1) as a primary DNS server for the

WinRoute host’s interface connected to the LAN 1 local network. It is not necessary

to set DNS server at the interface connected to LAN 2 — DNS conﬁguration is

applied globally to the entire operating system.

Figure 23.18 Headquarter — TCP/IP conﬁguration at

a ﬁrewall’s interface connected to the local network

• Set the IP address 10.1.1.1 as a primary DNS server also for the other hosts.

Note: For proper functionality of DNS, the DNS database must include records for hosts

in a corresponding local network. To achieve this, save DNS names and IP addresses of

local hosts into the hosts ﬁle (if they use IP addresses) or enable cooperation of the DNS

Forwarder with the DHCP server (in case that IP addresses are assigned dynamically to

these hosts). For details, see chapter

8.1.

4. Enable the VPN server and conﬁgure its SSL certiﬁcate (create a self-signed certiﬁcate if no

certiﬁcate provided by a certiﬁcation authority is available).

Note: The VPN network and Mask entries now include an automatically selected free sub-

net.

1 2 ... 324 325 326 327 328 329 330 331 332 333 334 ... 403 404

Commentaires sur ces manuels

Pas de commentaire

Kerio-tech Firewall6 Manuel d'utilisateur Page 329

Commentaires sur ces manuels