The client-tunnel endpoint editor in the LSMSGUI has been modified to include a network tab thatallows a network tunnel endpoint for a client to beconfigured and associated with the correspondingenterprise tunnel for that client. Using this tab, thenetwork-tunnel endpoint IP address, the hosts behindthe network tunnel, and the network group key tobe used during IKE phase 1 can be configured. As described earlier, these items constitute the policy information for the network tunnel that is downloadedthrough the enterprise tunnel and is then used to initiate the network tunnel.The LSMS GUI has also been changed to allowthe specification of TCP ports in addition to the hostsubnets behind the tunnels for each of the tunnels. Inaddition, the back-end LSMS server has been modi-fied to convey these port numbers to the client and todownload network-tunnel policy information to theIPSec client through the enterprise tunnel.
No comments:
Post a Comment
Note: only a member of this blog may post a comment.