Nokia CC500 - VPN - Gateway Support and Manuals
Get Help and Manuals for this Nokia item
Popular Nokia CC500 Manual Pages
User Guide - Page 1
VPN Connection to Nokia CryptoCluster 500 VPN Gateway
11 December 2002
This document explains how to configure a virtual private network connection over an open network from a remote host running SSH Sentinel to a private network protected by a Nokia CryptoCluster 500 VPN gateway.
User Guide - Page 2
...www.ssh.com/ e-mail: [email protected] (sales), sentinel-support@ssh.com (technical support) Tel: +358 20 500 7030 (Finland), +1 650 251 ...VPN with SSH Sentinel and Nokia CryptoCluster
THERE IS NO WARRANTY OF ANY KIND FOR THE ACCURACY OR USEFULNESS OF THIS INFORMATION EXCEPT AS REQUIRED BY APPLICABLE LAW OR EXPRESSLY AGREED IN WRITING. 2
c 2000-2002 SSH Communications Security Corp
No part...
User Guide - Page 3
... Nokia CryptoCluster 500 VPN Gateway
5
1.1 Introduction 5
1.1.1 Further Information 5
1.1.2 Platform Requirements 5
1.2 Configuring Nokia CryptoCluster 500 6
1.2.1 Prerequisites 6
1.2.2 Enabling Client Access in CryptoCluster 6
1.3 Configuring SSH Sentinel 9
1.3.1 Prerequisites 9
1.3.2 Creating the VPN Rule 9
1.4 Troubleshooting 11
VPN with SSH Sentinel and Nokia...
User Guide - Page 4
VPN with SSH Sentinel and Nokia CryptoCluster 4
CONTENTS
c 2002 SSH Communications Security Corp.
User Guide - Page 5
... 500 (CC500) VPN Gateway documentation.
1.1.1 Further Information
SSH Sentinel User Manual SSH Sentinel support: http://www.ipsec.com.
1.1.2 Platform Requirements
The interoperability between SSH Sentinel and Nokia CryptoCluster 500 has been tested using the following components:
SSH Sentinel VPN client v1.4 Nokia CryptoCluster 500 (CC500) VPN gateway, kernel version 4.0(102) Nokia VPN Policy...
User Guide - Page 6
...Nokia CryptoCluster 500 VPN Gateway
1.2 Configuring Nokia CryptoCluster 500
1.2.1 Prerequisites
It is assumed that the initial gateway installation...settings (see Figure 1.1 (CryptoCluster Client Policy settings)):
Figure 1.1: CryptoCluster Client Policy settings
c 2002 SSH Communications Security Corp. A request for a gateway certificate can configure the CRL and SCEP settings...
User Guide - Page 7
...IKE policy, or Add to be The gateway's protected host groups. Select Encryption and Integrity as the IPSec policy.
3. and make the settings shown in Figure 1.3 (CryptoCluster Advanced IPSec settings):
Figure 1.3: CryptoCluster Advanced IPSec settings
5. Make the settings shown in this example, root).
2. VPN with SSH Sentinel and Nokia CryptoCluster
c 2002 SSH Communications Security Corp...
User Guide - Page 8
...Policy Manager main menu. Enable Allow clients to Nokia CryptoCluster 500 VPN Gateway
Figure 1.4: CryptoCluster IKE Policy settings
9. VPN with SSH Sentinel and Nokia CryptoCluster Apply Changes in Figure 1.5 (CryptoCluster Client Access settings):
Figure 1.5: CryptoCluster Client Access settings
10.
Take the new settings into use by selecting Actions -
c 2002 SSH Communications...
User Guide - Page 9
...;cates - Specify the following values (see the SSH Sentinel User Manual. For example, if the network behind the gateway is already present in SSH Sentinel and that a client certificate is 192.168.1.0./255.255.255.0, create
VPN with SSH Sentinel and Nokia CryptoCluster
c 2002 SSH Communications Security Corp. On the Security Policy...
User Guide - Page 10
... IPSec/IKE proposal, click Settings to open the editor), and select it as the remote network here. IKE mode: main mode - Integrity function: HMAC-SHA-1 - IPSec mode: tunnel -
button to specify the following:
IKE proposal - Authentication key: select the certificate you wish to Nokia CryptoCluster 500 VPN Gateway
this network entry in...
User Guide - Page 11
...the SSH Sentinel User Manual for details. On the Advanced page, the default values for troubleshooting. Open the VPN tunnel via the SSH Sentinel tray icon. 7. VPN with SSH Sentinel and Nokia CryptoCluster
c 2002 SSH Communications Security Corp.
1.4. Refer to probe the connection. 6. Troubleshooting
11
3. Click OK and Apply to save the settings. 5. Ping the private interface...
Nokia CC500 Reviews
We have not received any reviews for Nokia yet.