Enforcing and Encrypting Automatic Tunnelling

You can enforce automatic tunneling, and then encrypt automatic tunneling, for a client computer or client group.

You can enforce automatic tunneling by using the nCLNT_FORCE_TUNNEL additional setting. Automatic tunneling forces network traffic to go through a single tunnel port. The tunnel port is equal to the port number of the CVD plus 3. For example, if the port number of the CVD is 8400, then the tunnel port equals 8403.

You can encrypt automatic tunneling by using the nAUTO_TUNNEL_PROTO additional setting.

Before You Begin

Verify that the tunnel port is reachable from both sides.

Procedure

1. To enforce automatic tunneling, add the nCLNT_FORCE_TUNNEL additional setting to a client computer or to a client group as shown in the following table.

   For information about adding an additional setting from the CommCell Console, see Adding an Additional Setting from the CommCell Console.

   Additional setting	Category	Type	Value
   nCLNT_FORCE_TUNNEL	Firewall	Integer	0 (Default): Do not enforce automatic tunneling 1: Enforce automatic tunneling

2. To encrypt automatic tunneling, add the nAUTO_TUNNEL_PROTO additional setting to a client or to a client group as shown in the following table.

   For information about adding an additional setting from the CommCell Console, see Adding an Additional Setting from the CommCell Console.