Page 96 / 123
Scroll up to view Page 91 - 95
VPN
93
Figure 73: Modify Security Method
26. Click "OK" to save your changes, then click "OK" again to return to the Filter Action
screen.
27. Select the
Tunnel Setting
tab, and enter the WAN (Internet) IP address of this PC
(172.16.9.10 in this example).
Figure 74: Tunnel Setting
28. Select the
Authentication Methods
tab, and click the "Edit" button to see the screen below.
Page 97 / 123
TW100-BRV304 User Guide
94
Figure 75: Authentication Method
29. Select
Use this string to protect the key exchange (preshared key)
, then enter your pre-
shared key in the field provided.
30. Click "OK" to save your settings, then "Close" to return to the
DUT to Win2K Properties
screen. There should now be 2 IP Filers listed, as shown below.
Figure 76: DUT to Win2K Properties
31. Select the
General
tab.
Page 98 / 123
VPN
95
Figure 77: Properties - General Tab
32. Click the "Advanced" button to see the screen below.
Figure 78: Key Exchange Settings
33. Click the "Methods" button to see the screen below.
Page 99 / 123
TW100-BRV304 User Guide
96
Figure 79: Key Exchange Security Methods
34. Select the first entry, and click the "Edit" button to see the following screen.
Figure 80: IKE Security Algorithms
35. Select "SHA1" for
Integrity Algorithm
, "3DES" for
Encryption algorithm
, and "Low(1)"
for the
Diffie-Hellman Group
.
36. Click "OK" to save, then "OK" again, and then "Close" to return to the
Local Security
Settings
screen.
37. Right click the
DUT to Win2K Policy
and select "Assign" to make your policy active.
Figure 81: Windows 2000/XP Client to Broadband VPN Gateway
Configuration is now complete.
Page 100 / 123
VPN
97
Example 3: Windows 2000 Server to VPN Gateway
In this example, a Windows 2000 Server connects to the TW100-BRV304. Users on each
LAN can then gain access to the remote LAN.
Figure 82: TW100-BRV304 to Windows 2000 Server
TW100-BRV304 Configuration
This is the same as for the client setup earlier, with the exception of the IP address range for
the remote endpoint.
Setting
Single Client
Server/Gateway
Remote
IP addresses
172.16.9.10
For a single client, this is the
same as the Gateway address
Subnet address:
11.5.0.0
255.255.0.0
Address range used on the remote LAN.
19216811.live