D-Link DBG-2000 Product Manual 1 - Page 101

DBG-2000 User Guide Remote Client (client-to-gateway VPN tunnel): A remote client initiates a VPN tunnel as the IP address of the remote PC client is not known in advance. The gateway, in this case, acts as a responder. Remote Client behind a NAT router: The client has a dynamic IP address and is behind a NAT Router. The remote PC client at the NAT router initiates a VPN tunnel as the IP address of the remote NAT router is not known in advance. The gateway WAN port acts as a responder. PPTP server tunnel for PPTP client connections L2TP server tunnel for L2TP client connections OpenVPN server tunnel for OpenVPN client connections GRE tunnel In this chapter, you will learn how to configure the VPN protocols supported by the cloud gateway. This chapter covers the following topics: Site to Site VPN As the name suggests, site-to-site VPN is a technique that allows connectivity between the offices located at multiple locations by setting up an IPSec tunnel over the Internet to access the intranet. In short, a site-to-site VPN builds a secure path over an insecure path. The Nuclias cloud gateway allows users to establish a VPN tunnel without manually entering the tunnel endpoint details and the local/remote networks. Instead, the Nuclias cloud gateway maintains these details, and users select the networks based on their requirements. The site-to-site VPN page consists of the following two sections: 1. VPN Topology VPN topology discusses how all the clients and networks are connected over the IPSec tunnel. The Quick VPN field allows users to build VPN tunnels between DBG-2000 devices deployed in the same Organization of the Nuclias cloud. There are the following three modes in the Quick VPN field: Disable (Manual) Site-to-Site Hub-and-Spoke When you select Site-to-Site or Hub-and-Spoke mode in Quick VPN, each participating DBG-2000 device automatically performs the following functions: Advertises its local subnets that are participating in the VPN Advertises its WAN IP addresses on the available WAN ports Applies the global VPN route table Applies the necessary configuration for establishing the VPN tunnel and traffic encryption The net result is an automatic site-to-site VPN solution that is configured with a single click. 2. VPN Settings Disable (Manual) When you select Disable (manual) mode, DBG-2000 does not participate in the site-to-site or hub-and-spoke VPN, and the user will not be able to join the site-to-site or hub-and-spoke VPN connection automatically. Instead, the user can manually configure it in the Manual VPN Configuration section and build IPSec VPN tunnels. This mode is useful when you try to establish a tunnel between two DBG-2000 devices deployed in different Nuclias cloud organizations or when you try to establish a tunnel between DBG-2000 and/or with any third-party gateway. The fields available in the Manual VPN configuration table are as follows: Field Name Remote gateway Description It displays the name of the VPN. It displays the remote IP address to which the VPN tunnel is established. 101