Hello and welcome to this lecture in this lecture we configure the four key firewall for the remote
access VPN.
So how we will do it we'll do it through going it's simpler and it's faster.
So let's navigate now to Chrome let's say admin no password.
Just say later later in the left side we have the VPN menu.
So we have to click on VPN by the way by the way before that the virtual machine is running in evaluation.
So this means that not all of the features are available or as you will see not all of the encryption
and authentication algorithms are available but it doesn't matter for testing purposes.
It's absolutely perfect.
So navigate to a VPN then let's go to IP SEC wizard and here we can select from from some predefined
templates to say so.
So we have set aside remote access was the remote device.
Is it the 48.
Is it a Cisco and so on.
For now we will say remote access and the remote device it's using for the client.
So as you can see either it's a phone or a laptop or a tablet.
It doesn't matter.
It's using for decline.
So this is what we will use.
You can also configure the remote device to to use the Cisco the Cisco VPN plan the any clinic plan.
But in this in this course we will use the the vendor specific for the client planned so let's name
it something let's say remote access VPN for the client too many courtrooms it's not OK.
Remote access VPN 40 and I will say now next.
Now the traffic is coming inside.
So it's going in in the land side and private segment through what interface and it's coming through
the when port once selected will use appreciate key and they will say the pressure key is fortunate.
And so again fortunate and we need to define the user group so we don't have a user group here.
I will just click on the plus and create new
and I will say remote access group and I will I will live the type as firewall because this is what's
going to to be and for the user let's say I want a user
local user so we don't use any external servers like radios or TAC X or held up anyway.
So a local user defined on the firewall.
So click Next the user will be user with password user.
And next e-mail address lets the user and company that come next.
These are account is enabled and is going to be in the user group
let's say submit now
and.
OK let's go home and go to user and device
user and device user groups
so remote access group I will say.
Edit and members is going to be user and OK so now we have these remote access group with one member
the member is user.
So let's navigate here again and do a refresh
we have to type all over again.
Remote access VPN 40.
This is a remote access we are using clan based for the client.
Next incoming interface Pt. 1.
Pretty sure key is 40 Net User Group is remote access group and next local interface so port number
2 is our private facing interface or going to the private land space one and 2 ones except one that
one so I will select port to local address we don't have any objects that that refer to our private
space or why we defined now one so I click on plus create new and Clay create an address the name will
be HQ land.
This is a subnet and the subnet is 1 9 2 that once exceed that one 0 and the slash 24 interface board
number two and.
OK.
So this is the local address EU land.
Now when the client will try to connect so the remote the remote plane the remote worker it will be
assigned an IP address.
So we have to specify here what is the address range so range meaning that if I define a 10 IP addresses
range 10 remote workers are are going to be able to connect to our firewall so let's say 1 9 2 1 6 say
that 1 the 200 up to 1 and 2 the 1 6 say that 1 2 0 9 which means 10 addresses starting from 0 going
up to 9 and the subnet mask is a slash 24 please note that this IP address range XYZ now it's from the
the from the same subnet that we have on our LAN so I will say next and save the password auto connect.
Okay just some some other options I will leave it the default and say create so I can click on short
tunnel list and it moves here in the basic tunnels so this is a so the template being used dial up for
declined for Windows macros and unread the status is inactive interface bindings so the traffic is coming
inside through port number one and this is the naming.
So basically we have now finished the configuration of the remote access VPN on the HQ for the gate
firewall in the next section we will concentrate on downloading the 40 the client VPN software for the
Windows 10 machine and then the installation.
So thanks a lot and see you in the next lecture.