WSM User Guide - WatchGuard Technologies

Making a Manual Tunnel15 In the Addresses block of the New Tunnel dialog box, click Add to add a pair of addresses that usethe tunnel.The Local-Remote Pair Settings dialog box appears.16 From the Local drop-down list, select the local address you want.You can also click the button adjacent to the Local drop-down list to use an IP address, network address, or a rangeof IP addresses.17 In the Remote box, type the remote network address. Click the button adjacent to the Remote boxto open the Add Address dialog box.18 From the Choose Type drop-down list, select the type of address you want to use.Select Host IP (one IP address), Network IP (a network IP address with the mask in slash notation),or Host Range (a range of IP addresses).19 In the Value text box, type an IP address or network address.20 Click OK.The Add Address dialog box closes.21 From the Direction drop-down list, select the direction for tunnel. The tunnel direction decideswhich endpoint of the VPN tunnel can start a VPN connection through the tunnel.22 You can enable NAT for the tunnel. Select the 1:1 NAT check box or the DNAT check box.The options that you can select for NAT are different for different types of addresses and different tunnel directions.For 1:1 NAT, type the address to change with NAT in the field.Dynamic NAT is also available through the VPN. You must set a unidirectional tunnel from LAN1 to LAN2 whereyou want all LAN1 servers to connect to LAN2 servers but appear as only one IP address on LAN2. For informationon how to do this, see “Setting up Outgoing Dynamic NAT through a BOVPN Tunnel” on page 250.23 After you configure the pair, click OK.24 When you complete the tunnel configuration, click OK.Editing and deleting a tunnelTo change a tunnel, select VPN > Branch Office Tunnels. Or, right-click on a tunnel icon in the BranchOffice VPN tab of Policy Manager, and select Tunnel Property.1 Select the tunnel and click Edit.The Edit Tunnel dialog box appears.User Guide 249