When configuring VPN dial-in connections, there is as an alternative to fixed IP addresses for the remote sites that dial in, in that a pool of IP addresses can be made available to them. To this end, the "IKE-CFG" mode is additionally added to the entries in the connection list. This can assume the following values:
- Server: With this setting, the device functions as the server for this VPN connection. The assignment of an IP address to the client can take place in two ways:
- If the remote site is entered in the routing table, the IP address defined here will be assigned to the client.
- If the remote site is not entered in the routing table, an IP address which is available from the IP pool will be taken for the dial-in connections.
Note: The remote site must be configured as IKE-CFG client in this case, and thus has to request an IP address from the server. To dial in with a LANCOM Advanced VPN Client, the option Use IKE Config Mode has to be activated in the connection profile.
- Client: With this setting, the device functions as the client for this VPN connection and requests an IP address from the remote site (server). The device acts in a similar manner to a VPN client.
- Off: If the IKE-CFG mode is switched off, no IP addresses will be assigned for the connection. Fixed IP addresses must be defined for both ends of the connection.
LANconfig:
Command line:
