Tripp Lite B092-016 - Enable the VPN Gateway; Ipsec VPN

56
ToaddanewseriallyconnectedManagedDevice:
• Conguretheserialportusingthe Serial&Network: Serial Port menu(referSection 4.1 -Configure Serial Port)
• SelectSerial&Network: Managed Devices and click Add Device
• EnteraDevice Name and DescriptionfortheManagedDevice
• ClickAdd Connection and select Serial and the PortthatconnectstotheManagedDevice
• ToaddaUPS/RPCpowerconnectionornetworkconnectionoranotherserialconnectionclickAdd Connection
• ClickApply
Note: To set up a new serially connected RPC UPS or EMD device, you configure the serial port, designate it as a Device
then enter a Name and Description for that device in the Serial & Network: RPC Connections (or UPS Connections or
Environmental). When applied, this will automatically create a corresponding new Managed Device with the same Name /
Description as the RPC/UPS Host (refer Chapter8-PowerandEnvironment)
Also all the outlet names on the PDU will by default be “Outlet 1” “Outlet 2”. When you connect an particular Managed Device
(that draws power from the outlet) they the outlet will then take up the name of the powered Managed Device
Chapter 4: Serial Port, Device and User Configuration
4.9 IPsec VPN
TheConsoleServersincludeOpenswan,aLinuximplementationoftheIPsec(IPSecurity)protocols,whichcanbeusedto
congureaVirtualPrivateNetwork(VPN).TheVPNallowsmultiplesitesorremoteadministratorstoaccesstheConsole
Server(andManagedDevices)securelyovertheInternet.
• TheadministratorcanestablishanencryptedauthenticatedVPNconnectionsbetweenConsoleServersdistributedat
remotesitesandaVPNgateway(suchasCiscorouterrunning IOS IPsec)ontheircentralofcenetwork:
 o Usersandadministratorsatthecentralofcecanthensecurelyaccesstheremoteconsoleserversand
  connectedserialconsoledevicesandmachinesontheManagementLANsubnetattheremotelocationas
though they were local
 o Withserialbridging,serialdatafromcontrolleratthecentralofcemachinecanbesecurelyconnectedtothe
  seriallycontrolleddevicesattheremotesites(referChapter4.1)
• TheroadwarrioradministratorcanuseaVPNIPsecsoftwareclientsuchasTheGreenBow(www.thegreenbow.com/vpn_
gateway.html)orShrewSoft(www.shrew.net/support)toremotelyaccesstheConsoleServerandeverymachineonthe
ManagementLANsubnetattheremotelocation
CongurationofIPsecisquitecomplexsoTrippLiteprovidesasimpleGUIinterfaceforbasicsetupasdescribedbelow.
HoweverformoredetailedinformationonconguringOpenswanIPsecatthecommandlineandinterconnectingwithother
IPsecVPNgatewaysandroadwarriorIPsecsoftwarereferhttp://wiki.openswan.org
4.9.1 Enable the VPN gateway
• SelectIPsec VPN on the Serial & Networks menu
• ClickAdd and complete the Add IPsec Tunnel screen
• EnteranydescriptivenameyouwishtoidentifytheIPsecTunnelyouareaddingsuchasWestStOutlet-VPN