State Status of the interfaces:
Enabled: Double-click to enable the created interface.
Disabled: The interface is not in operation. The line will be grayed out in order to
reflect this.
Name
(mandatory)
Give the IPSec interface a name.
NOTE
To find out which characters are allowed or prohibited in various fields, please
refer to Appendix A: Allowed names.
IP address
(mandatory)
Enter the IP address assigned to the virtual interface created.
Network mask
(mandatory)
The default value suggested is 255.255.255.252. Since virtual IPSec interfaces are
meant for setting up point-to-point tunnels, a network that allows assigning two
addresses is sufficient in theory. This value may however be customized.
Comments
(optional)
Any text.
Creating or modifying a GRE interface
The GRE protocol allows encapsulating IP traffic in a point-to-point IP tunnel. This allows, for
example, routing networks from one site to another through a GRE tunnel without having to
declare this routing method on all routers in between.
GRE tunnels are not encrypted natively: they merely encapsulate. GRE traffic can however be
made to go through an IPSec tunnel.
To create or modify a virtual GRE interface, click on the “GRE interfaces” tab.
Button bar
Search Search that covers interfaces.
Add Adds an “empty” interface. An added interface (sending of a command) is effective
only if its fields Name, IP address, Network mask, Tunnel source and Tunnel
destination have been entered.
Delete Deletes one or several selected interfaces. Use the keys Ctrl/Shift + Delete to delete
several interfaces.
Check usage
Represented by the icon , this button indicates whether the selected interface is
being used elsewhere in the configuration.
Click on Add in the toolbar. An additional row will be inserted into the table of GRE interfaces.
Presentation of the table
The table sets out seven fields of information:
State Status of the interfaces:
Enabled: Double-click to enable the created interface.
Disabled: The interface is not in operation. The line will be grayed out in order to
reflect this.
Name(mandatory) Give the GRE interface a name.
Page 359/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
VIRTUAL INTERFACES