Adding an anonymous incoming connection IPsec route 

Table of Contents: Administering Lotus Foundations Start: FS12

---

Creating an anonymous IPsec route eliminates the need for statically identifying the remote server IP address.

To configure an anonymous connection, follow these steps:

1. Select VPN in the left menu of WebConfig.
2. Select the IPsec Setup tab.
3. Select Add New IPsec Route. The Create IPsec Route page is displayed.
   
Figure 1. Create IPsec Route screen




4. Enter 0.0.0.0 in the Remote Server field. The IBM® Lotus Foundations™ server must have a static IP address.
5. To include a private subnet behind the remote server's firewall, enter the internal subnet containing the internal IP address of the remote unit in the Remote Subnet field. For example, if the unit's internal IP address is 192.168.10.1 with a subnet mask of 255.255.255.0, enter 192.168.10.0/24.
6. Enter a remote IKE key. This password needs to be entered on both ends of the IPsec connection.
7. Click Yes to enable the Perfect Forward Secrecy (PFS) feature. The two ends do not negotiate this automatically, so make sure that the setting is the same on both ends.
8. For Enable this connection, click Yes.
9. Click Save Changes.
   
   

Parent topic: IPsec: FS12