Page 106 / 177
Scroll up to view Page 101 - 105
106
|
Chapter 6.
Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
Example of Using Auto Policy
Figure 54.
The following settings are assumed for this example:
To use Auto Policy:
1.
Set the LAN IPs on each N300 wireless modem router to different subnets and configure
each correctly for the Internet. On the main menu, select
VPN Policies
and click the
Add Auto Policy
button.
Table 6.
Gateway-to-Gateway VPN Tunnel Configuration Worksheet
Parameter
Value to Be Entered
Field Selection
Connection Name
GtoG
N/A
Pre-Shared Key
12345678
N/A
Secure Association
N/A
Main Mode
Manual Keys
Perfect Forward secrecy
N/A
Enabled
Disabled
Encryption Protocol
N/A
DES
3DES
Authentication Protocol
N/A
MD5
SHA-1
Diffie-Hellman (DH) Group
N/A
Group 1
Group 2
Key Life in seconds
28800 (8 hours)
N/A
IKE Life Time in seconds
3600 (1 hour)
N/A
VPN Endpoint
Local IPSecID
LAN IP Address
Subnet Mask
FQDN or Gateway
IP (WAN IP Address
Gateway_A
GW_A
192.168.0.1
255.255.255.0
14.15.16.17
Gateway_B
GW_B
192.168.3.1
255.255.255.0
22.23.24.25
Gateway A
Gateway B
VPN Tunnel
Internet
22.23.24.25
14.15.16.17
IP:192.168.3.1
Downloaded from
www.Manualslib.com
manuals search engine
Page 107 / 177
Chapter 6.
Virtual Private Networking
|
107
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
The VPN Auto Policy screen displays:
2.
Enter these policy settings:
Auto Policy Field
Description
General
Policy Name
GtoG
Remote VPN Endpoint
Address Type
Fixed
Remote VPN Endpoint
Address Data
22.23.24.25
Local LAN
Use the default settings.
Remote LAN
IP Address
Select
Subnet address
from the drop-down list.
Start IP Address
192.168.3.1
Subnet Mask
255.255.255.0
Downloaded from
www.Manualslib.com
manuals search engine
Page 108 / 177
108
|
Chapter 6.
Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
3.
Click
Apply
. The VPN Policies screen displays:
4.
Repeat these steps for the N300 Wireless Dual Band ADSL2+ Modem Router
DGND3300v2 on LAN B. Pay special attention to the following network settings:
•
General, Remote Address Data (for example, 14.15.16.17)
•
Remote LAN, Start IP Address
-
-
Subnet Mask (for example, 255.255.255.0)
-
Pre-shared Key (for example, 12345678)
5.
Use the VPN Status screen to activate the VPN tunnel:
Note:
The VPN Status screen is only one of three ways to active a VPN
tunnel. See
Activating a VPN Tunnel
on page
94 for information
about the other ways.
IKE
Direction
Initiator and Responder
Exchange Mode
Main Mode
Diffie-Hellman (DH) Group
Group 2 (1024 Bit)
Local Identity Type
Use the default setting.
Remote Identity Type
Use the default setting.
Parameters
Encryption Algorithm
3DES
Authentication Algorithm
MD5
Pre-shared Key
12345678
Auto Policy Field
Description
Downloaded from
www.Manualslib.com
manuals search engine
Page 109 / 177
Chapter 6.
Virtual Private Networking
|
109
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
a.
From the main menu, select
VPN Status
to display the VPN Status/Log screen. Then
click
VPN Status
to display the Current VPN Tunnels (SAs) screen:
b.
Click
Connect
for the VPN tunnel that you want to activate. Review the VPN
Status/Log screen (
Figure
a
on page
94) to verify that the tunnel is connected.
Using Manual Policy to Configure VPN Tunnels
As an alternative to IKE, you can use manual keying, in which you must specify each phase
of the connection. A manual VPN policy requires all settings for the VPN tunnel to be
manually input at each end (both VPN endpoints).
Downloaded from
www.Manualslib.com
manuals search engine
Page 110 / 177
110
|
Chapter 6.
Virtual Private Networking
N300 Wireless Dual Band ADSL2+ Modem Router DGND3300v2 User Manual
On the main menu, select
VPN Policies
, and then click the
Add Manual Policy
radio button
to display the VPN - Manual Policy screen:
The following table explains the fields in the VPN - Manual Policy screen.
Table 7.
VPN Manual Policy Fields and Settings
Fields and Settings
Description
General
The N300 Wireless Dual
Band ADSL2+ Modem
Router DGND3300v2
VPN tunnel network
connection fields.
Policy Name
Enter a unique name to identify this policy. This name is not
supplied to the remote VPN endpoint. It is used only to help you
manage the policies.
Remote VPN
Endpoint
• The remote VPN endpoint must have this VPN’s gateway
address entered as its remote VPN endpoint.
• If the remote endpoint has a dynamic IP address, select
Dynamic IP Address
. No address data input is required. You
can set up multiple remote dynamic IP policies, but only one
such policy can be enabled at a time. Otherwise, select an
option (
IP address
or
domain name
) and enter the address of
the remote VPN endpoint to which you want to connect.
Downloaded from
www.Manualslib.com
manuals search engine
19216811.live