DFL-500 User Manual 62The destination address is the IP address of the remote network behind the remote VPN gateway.The destination address is the IP address of the remote network behind the remote VPN gateway.If you are adding an encrypt policy for a VPN with a remote VPN client connected to the Internet, thedestination address should be the Internet address of the client computer.• Go to Firewall > Policy > Int->Ext .• Select New to add a new policy.Adding an encrypt policy• Set Source to the VPN source address.• Set Destination to the VPN destination address.• Set Action to ENCRYPT.Service is set to ANY and cannot be changed.• Configure the ENCRYPT parameters.VPN Tunnel Select an AutoIKE key or Manual Key tunnel. For information about adding VPN tunnels, seeAdding an AutoIKE key VPN tunnel and Adding a manual key VPN tunnel.Allowinbound Select Allow inbound to enable inbound users to connect to the source address.