How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
-
Upload
vinay-sahu -
Category
Documents
-
view
225 -
download
0
Transcript of How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 1/6
How To – Bypass IPSec VPN Traffic
Applicable Version: 10.00 onwards
Scenario
Cyberoam should bypass the IPSec VPN traffic between Site A and Site B, in other words, between
Router A and Firewall B. The network schema is as given below.
Configuration
Cyberoam can bypass IPSec VPN traffic if it has its UDP ports 500 and 4500 open both from WAN
and LAN sides. To open the ports, follow the steps given below. The configuration is to be done from
Web Admin Console using Administrator profile.
How To – Bypass IPSec VPN Traffic
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 2/6
How To – Bypass IPSec VPN Traffic
Step 1: Create Virtual Host for UDP port 500
Go to Firewall Virtual Host Virtual Host and click Add to create a new virtual host according to
parameters given below.
Parameter Description
Parameter Value Description
Name UDP_Port_500 Name to identify the Virtual Host.
External IP #PortC – 10.10.1.1
External IP address is the IP address
through which Internet users access
internal server/host.
Mapped IP 172.16.16.20Mapped IP address is the IP address of
the internal server/host.
Physical Zone LAN
LAN, WAN, DMZ, VPN or custom zone of
the mapped IP addresses. For example,
if mapped IP address represents any
internal server then the zone in which
server resides physically.
Port Forwarding
Enable Port Forwarding Enabled Click to enable service port forwarding.
Protocol UDPSelect the protocol TCP or UDP that you
want the forwarded packets to use.
Port Type PortClick to specify whether port mapping
should be single or range of ports.
External Port 500Specify public port number for which you
want to configure port forwarding.
Mapped Port 500
Specify mapped port number on the
destination network to which the public
port number is mapped.
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 3/6
How To – Bypass IPSec VPN Traffic
On clicking OK, you are asked to create Firewall Rules to allow access to the virtual host created.
Step 2: Add Firewall Rule
On clicking OK, the following screen is displayed prompting you to create Firewall Rules.
Enable Add Firewall Rule(s) For Virtual Host and specify parameters shown in the screen as
required. Click Add Rule(s) to add the firewall rule. The above firewall rule forwards all traffic from
port 500 on WAN side to port 500 on the LAN side.
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 4/6
How To – Bypass IPSec VPN Traffic
Step 3: Create Virtual Host for UDP port 4500
Go to Firewall Virtual Host Virtual Host and click Add to create a new virtual host according to
parameters given below.
Parameter Description
Parameter Value Description
Name UDP_Port_4500 Name to identify the Virtual Host.
External IP #PortC – 10.10.1.1
External IP address is the IP
address through which Internet
users access internal server/host.
Mapped IP 172.16.16.20Mapped IP address is the IP
address of the internal server/host.
Physical Zone LAN
LAN, WAN, DMZ, VPN or custom
zone of the mapped IP addresses.For example, if mapped IP address
represents any internal server then
the zone in which server resides
physically.
Port Forwarding
Enable Port Forwarding EnabledClick to enable service port
forwarding.
Protocol UDP
Select the protocol TCP or UDP
that you want the forwarded
packets to use.
Port Type Port
Click to specify whether port
mapping should be single or range
of ports.
External Port 4500
Specify public port number for
which you want to configure port
forwarding.
Mapped Port 4500
Specify mapped port number on
the destination network to which
the public port number is mapped.
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 5/6
How To – Bypass IPSec VPN Traffic
On clicking OK, you are asked to create Firewall Rules to allow access to the virtual host created.
Step 4: Add Firewall Rule
On clicking OK, the following screen is displayed prompting you to create Firewall Rules.
Enable Add Firewall Rule(s) For Virtual Host and specify parameters shown in the screen as
required. Click Add Rule(s) to add the firewall rule. The above firewall rule forwards all traffic from
port 4500 on WAN side to port 4500 on the LAN side.
7/27/2019 How to %c3%a2%e2%82%Ac%e2%80%9c Bypass IPSec VPN Traffic
http://slidepdf.com/reader/full/how-to-c3a2e282ace2809c-bypass-ipsec-vpn-traffic 6/6
How To – Bypass IPSec VPN Traffic
Note:
Ensure that there exists a similar Firewall Rules which forward all traffic from port 500 and 4500 on
LAN side to port 500 and 4500 respectively on the WAN side.
Document Version: 1.0 – 28/06/2012