Perle Systems Iolan Sds4 Hl Device Server 4030370 User Manual

 363

Configuring a Virtual Private Network

If the signer of the remote X.509 certificate has not already been included in the CA list file that 
has already been downloaded to the IOLAN, you need to add (append) the signer of the X.509 
certificate to the CA list file and then download the file to the IOLAN by selecting 

, 

, 

. In the Keys and Certificates window, select 

 and the file name and click 

. Note that this file must be a concatenation of all 

certificate signers required for any SSL/TLS, LDAP, SSH, and/or IPsec connections.

Enable the 

 service found in 

, 

. 

The following example shows how to configure two IOLANs to work as VPN gateways for a host-to-
host IPsec tunnel. 

 is enabled in this example (on both sides) because the 

VPN tunnel is going private network to public network to private network. In this example, both of 
the IOLAN VPN gateways have a DHCP assigned IP address.

The following window configures the Left IOLAN VPN Gateway:

Internet