Related Topics

Define Gateway Endpoints for a BOVPN Gateway

Gateway Endpoints are the local and remote gateways that a BOVPN connects. The gateway endpoints configuration tells your Firebox how to identify and communicate with the remote endpoint device when it negotiates the BOVPN. It also tells the device how to identify itself to the remote endpoint when it negotiates the BOVPN. You must configure at least one gateway endpoint pair when you add a BOVPN gateway.

Any external interface can be a gateway endpoint. If the local or remote endpoint has more than one external interface, you can configure multiple gateway endpoint pairs. This enables the device to failover to a secondary connection if the primary is not available. For more information, see Configure VPN Failover.

Do not use a secondary interface IP address as a gateway endpoint.
If you configure a gateway endpoint with a secondary interface IP address, the BOVPN connection might fail if the local Firebox initiates the BOVPN connection. This is because the Firebox initiates the connection with the primary interface IP address. If the remote endpoint initiates the BOVPN connection and specifies the secondary interface IP address, the connection succeeds.

If you configure more than one gateway endpoint pair, make sure that the gateway endpoints are listed in the same order on both endpoint devices.

Local Gateway

In the Local Gateway section, you configure the gateway ID and the external interface the BOVPN connects to on your Firebox.

For the gateway ID, if you have a static IP address you can select By IP Address. If you have a domain that resolves to the IP address the BOVPN connects to on your Firebox, select By Domain Information.

Remote Gateway

You can configure the gateway IP address and gateway ID for the remote endpoint device that the BOVPN connects to. The gateway IP address can be either a static IP address or a dynamic IP address. The gateway ID can be By Domain Name, By User ID on Domain, or By x500 Name. The administrator of the remote gateway device selects which gateway ID type to use.

If the remote VPN endpoint gets an external IP address from DHCP or PPPoE, set the ID type of the remote gateway to Domain Name. Set the peer name to the fully qualified domain name of the remote VPN endpoint. The Firebox uses the IP address and domain name to find the VPN endpoint. Make sure the DNS server the device uses can identify the name.

See Also

Configure Manual BOVPN Gateways

Configure Manual BOVPN Tunnels

Give Us Feedback     Get Support     All Product Documentation     Technical Search