


File Formats                                        vpngateway(4)



NAME
     vpngateway - VPN gateway object for SunScreen configuration

DESCRIPTION
     A  vpngateway  object  describes  how  a  collection  of  IP
     addresses  is protected by a SKIP-enabled gateway, such as a
     SunScreen.  It is manipulated via the  configuration  editor
     or SunScreen administration GUI.

     The VPN Gateway associates  a  set  of  addresses  with  the
     manner  in  which they participate in a given VPN, including
     such data as which certificate to use and  what  algorithms.
     The  data  is  specified  as follows: "name of VPN" "name of
     Address" SKIP "name of Certificate", followed by  the  algo-
     rithms: KEY "name of Key Algorithm" DATA "name of Data Algo-
     rithm" MAC "name of MAC  Algorithm"  COMPRESSSION  "name  of
     Compression algorithm".

     Optionally, a tunnel address may be specified, if the  hosts
     should be protected by tunneling their addresses.

     vpngateways are one of the few objects that cannot be  asso-
     ciated  directly  with a Screen object.  Their purpose is to
     generate SKIP-specific rules for the user, and in  order  to
     do so, the same data must be present on all Screens.

     A vpngateway entry is uniquely identified by its position in
     the list of vpngateway entries.  This identity may change as
     other vpngateway entries are added to the list.

SEE ALSO
     ssadm-edit(1M), address(4), certificate(4), rule(4)























                  Last change: 31 January 2000                  1



