Coordinator Connection via Another Coordinator

This connection option is suitable if you need to protect the IP traffic of a local network segment. In this scenario, there would be a ViPNet coordinator with a firewall for ViPNet clients of this local network on the border of the local network. In this case, you need to install the second ViPNet coordinator on the border of the local network segment. The first ViPNet coordinator (closer to Internet) has to be chosen as the firewall for the second ViPNet coordinator.

Such a connection of coordinators is called a cascade connection. As a result, the automatic routing of encrypted traffic from the internal segment of the local network to the local and global network will be achieved.

To configure a coordinator's connection via another coordinator acting as a firewall:

Select the coordinator node and click the Firewall tab.
Ensure there is a tick in the Use firewall check box.
Select Coordinator from the Firewall type drop-down box.
Select the IP address of the network interface that connects to the firewall from the IP address of network interface connected to the firewall drop-down list box. If you cannot specify the exact IP address and want to do it manually on the coordinator node itself, select Chosen on the network node.
Note: To display a list of IP addresses, you should have previously specified them via the IP addresses tab.
Select the coordinator that will act as a firewall from the Coordinator acting as firewall drop-down list box. Note: You can choose a coordinator connected to this coordinator.
Select the relationship between the coordinator you are setting and the coordinator that will act as firewall from the Positional relationship between network node and coordinator drop-down list box.
Note: This list box displays if firewall settings have been made for the coordinator acting as a firewall.

If you want the network configuration you are creating to work correctly, you must choose In the same local network (the same routing), otherwise the coordinator acting as the firewall must not use a firewall.