Nokia IPSO 4.0 - Configuring Transparent Mode in VPN Environments

2
134 Nokia Network Voyager for IPSO 4.0 Reference Guide
Configuring Transparent Mode in VPN Environments
To configure transparent mode in a virtual private network environment, you must create a range
or group of addresses that will be protected behind the IP address on the bridge. This must be
done because addresses cannot be learned dynamically behind a firewall.
In this example, the network administrator of Network A wants to provide Network B with
access to certain addresses behind the Nokia Platform with Firewall, which is in transparent
mode.
To do this, the network administrator would do the following in the firewall software:
1. Create a group of addresses on Firewall A.
In this case, the network administrator groups together addresses x, y, and z into group M.
2. Create an object for the remote Firewall B.
3. Create a rule, for example, Group M; Network B; Encrypt.
The network administrator on Network B also creates a rule for encrypted traffic through
Firewall B.
Network A
Network B
Internet
Switch
Switch
00327
Nokia Platform
with Firewall
XYZ
Firewall B
Group M
ISP