Page 71

501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA

l

+1 360 859 1780

SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014

smartrg.com

Page 72

501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA

l

+1 360 859 1780

SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014

smartrg.com

IP Tunnel

IP Tunneling is typically used as a means to establish a path between two independent networks. Your SmartRG gateway sup-

ports connecting islands of IPv6 networks across the IPv4 internet or IPv4 in IPv6 as well.

IPv6inIPv4

After selecting

Advanced Setup -> IP Tunnel -> IPv6inIPv4

from the left navigation bar, click the Add button. The screen shown on

the next page will appear.

1.

Enter a

Tunnel Name

2.

Currently, only the 6rd

Mechanism

is supported

3.

Select the appropriate LAN and WAN interfaces from the drop-down lists associated with the tunnel you wish to estab-

lish.

4.

IPv4 Mask Length, 6rd Prefix with Prefix Length

and

Border Relay IPv4 Address

can be configured automatically. Select

the

Manual

radio button to specify your desired settings for these fields.

Click

Apply/Save

to commit your changes.

Page 73

501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA

l

+1 360 859 1780

SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014

smartrg.com

IPv4inIPv6

After selecting

Advanced Setup -> IP Tunnel -> IPv4inIPv6

from the left navigation bar, click the

Add

button. The screen shown on

the next page will appear.

1. Enter a

Tunnel Name

2. Currently, only the DS-Lite

Mechanism

is supported.

Consult RFC6333 for further information regarding DS-Lite.

3. Select the appropriate

LAN

and

WAN

interfaces from the drop-down lists associated with the tunnel you wish to establish.

4. AFTR (Address Family Transition Router) may be configured automatically. Select the

Manual

radio button to specify

your desired value for fields.

Click

Apply/Save

to commit your changes.

Page 74

501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA

l

+1 360 859 1780

SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014

smartrg.com

IPSec

Internet Protocol Security is a protocol for securing communications by packet level encryption and authentication.

Use the

IPSec page to enable and remove connections, or edit existing connections. The

IPSec

configuration screen is dynamic. Some

options are revealed or hidden depending on the selected connection.

After selecting

Advanced Setup -> IP Sec

from the left navigation bar, click the

Add New Connection

. The following screen will ap-

pear. Enter your connection details by completing the appropriate fields.

Click

Apply/Save

to commit your changes.

Page 75

501 SE Columbia Shores Boulevard, Suite 500, Vancouver, Washington 98661, USA

l

+1 360 859 1780

SmartRG Inc. Propriety and Confidential. All Rights Reserved. Copyright © 2014

smartrg.com

The individual fields on this screen are defined as follows:

Field Name

Description

IPSec Connection Name

A free form text field.

Enter a descriptive name for this connection

IP Version

[IPv4, IPv6] Select the IP version environment associated with your infrastructure.

Tunnel Mode

[ESP

, AH] Select encapsulation method to be used.

Use AH tunnel mode to encapsulate a packet with AH and IP headers. For authenti-

cation, the entire packet is signed.

Use ESP tunnel mode to encapsulate a packet with ESP and IP headers. An ESP

trailer is added to the packet for authentication and integrity.

Local Gateway Interface

Select the WAN connection from the drop-down list to be associated with this tunnel.

Remote IPSec Gateway Address

Enter the he WAN IP for tunnel.

Tunnel Access From Local IP Addresses

[Subnet, Single Address] Select IP information for site A and B.

Subnet indicates entire LAN.

For single host, select Single Address.

Key Exchange Method

[Manual, Auto(IKE)] The default of Auto(IKE) which uses the negotiated key-exchange

method for IPSec is recommended.

Authentication Method

[Pre-Shared Key, Certificate (x.509)] Select the method by which the remote end will

authenticate.

Perfect forwarding Secrecy

[Enable, Disable] When enabled, this setting ensures that a session key derived from

a set of long-term keys will not be compromised if one of the long-term keys is com-

promised in the future.

If desired, use the

Advanced IKE Settings

area to select Phase 1 and Phase 2 specific parameters.