AirLive WL-8000VPN Manuale utente

OvisLink 8000VPN VPN Guide

WL/IP-8000VPN

Version 0.6

OvisLink 8000VPN VPN Guide

Document Revision

Version Date Note

0.1 11/10/2005 First version with four VPN examples

0.2 11/15/2005

1. Added example 5: dynamic VPN using TheGreenBow

VPN client

2. Corrected the illustration using 8000VPN icons

3. Added How To Use This Guide section

0.3 11/15/2005 Updated the cover page

0.4 11/17/2005 Minor correction for PPTP and L2TP LAN numbers

0.5 11/17/2005 Change PPTP and L2TP authentication method to CHAP

0.6 11/18/2005 Improved VPN router setup for Windows XP IPSec

OvisLink 8000VPN VPN Guide

Document Revision.................................................................................................i

WHAT IS THIS GUIDE .................................................................................................- 1 -

HOW TO USE THIS DOCUMENT..................................................................................- 1 -

VPN EXAMPLES.........................................................................................................- 2 -

EXAMPLE 1: USING IPSEC TO CONNECT 2LAN TOGETHER.......................- 4 -

USA Router Setup ............................................................................- 5 -

Germany Router Setup .....................................................................- 7 -

EXAMPLE 2: USING PPTPTO CONNECT REMOTE PC TO LOCAL LAN......- 10 -

Router Setup ................................................................................... - 11 -

Remote PC Setup (Using Windows XP VPN Client).....................- 13 -

EXAMPLE 3: IPSEC CONFIGURATION EXAMPLE .......................................- 19 -

Router’s IPSec Setup ......................................................................- 20 -

PC’s IPSec Setup (Windows XP) ...................................................- 24 -

EXAMPLE 4: USING L2TPTO CONNECT REMOTE PC TO LOCAL LAN......- 42 -

Router Setup ...................................................................................- 43 -

Remote PC Setup (Using Windows XP VPN Client).....................- 45 -

EXAMPLE 5: DYNAMIC VPNAPPLICATION EXAMPLE..............................- 51 -

Router’s Dynamic VPN with IPSec Setup .....................................- 52 -

Set up TheGreenBow VPN client...................................................- 56 -

OvisLink 8000VPN VPN Guide

VPN EXAMPLES

In this Guide, we will provide setup guide for 5 VPN application examples:

Using IPSec protocol to connect 2 remote LAN

together using 2 WL/IP-8000 VPN Routers.

Using PPTP protocol to connect 1 remote PC with

WL/IP-8000 VPN

Setting up IPSec protocol to connect a remote mobile

PC with WL/IP-8000 VPN

Using L2TP protocol to connect 1 remote PC with

WL/IP-8000 VPN

Setting up Dynamic VPN where WL/IP-8000 VPN will

accept any PC worldwide from anywhere without

sacrifice security

To setup a VPN connection, it involves setting up both in the router and the

PC sides. As you will notice, the setup for the VPN server on the router is very

simple. But the setup on the client side depends on what type of VPN client

software you use on the PC. Once you take time to go through the

step-by-step example, it will become more clear and easier to setup.

- 2 -

OvisLink 8000VPN VPN Guide

WHAT IS THIS GUIDE

The traditional VPN needs trained personnel with professional knowledge to

set up. This WL/IP-8000 VPN example guide provides a step-by-step easy

setup for the VPN configuration.

HOW TO USE THIS DOCUMENT

There are many options to set up secure VPN environment. Various

combinations may serve for different purposes. Each example provides a

way to use WL/IP-8000 VPN configuration. If you need to

zConfigure the manual key IPSec VPN, please use

example 1

zConfigure the automatic key IPSec VPN, please use

example 3

zConfigure PPTP VPN, please use example 2

zConfigure L2TP VPN, please use example 4

zConfigure Dynamic VPN, please use example 5

zConnect 2 LAN together with secured VPN, please use

example 1

zConfigure central site for VPN, please use example 2

to 5

zConfigure client site VPN using

Windows XP IPSec client, please use example 3

Windows XP PPTP VPN, please use example 2

Windows XP L2TP VPN, please use example 4

TheGreenBow IPSec VPN client, please use

example 5

- 1 -

OvisLink 8000VPN VPN Guide

- 3 -

OvisLink 8000VPN VPN Guide

EXAMPLE 1: USING IPSEC TO CONNECT 2LAN TOGETHER

Router WAN IP:

192.168.254.1 Router LAN IP:

192.168.2.254

Router LAN IP:

192.168.1.254 Router WAN IP:

192.168.254.2

PC1 IP:

192.168.1.138 PC2 IP:

192.168.2.174

USA Office German Office

In this example, we will connect the USA office and German office

together using IPSec VPN server (WL/IP-8000VPN on both sides). The

goal is to let both offices’ network together and operate as if they are on

the same LAN. PC1 can link to PC2 freely. Please note that for security

purpose, IPSec require that the IP subnet on both side of the VPN tunnel

must be different. Therefore, in this example, the USA office’s local IP

subnet is 192.168.1.x. The German office’s local IP subnet is

192.168.2.x.

- 4 -

OvisLink 8000VPN VPN Guide

USA Router Setup

1. After login to WL/IP-8000VPN, click on VPN button on top of the page.

5 6 8

2. Check VPN Enable

3. Check NetBIOS Broadcast Enable

4. Enter Max. number of tunnels as 1.

5. In tunnel ID 1, enter the Tunnel Name as German.

6. In tunnel ID 1, enter the Method as Manual.

7. Click on Save button at the bottom of the page. (no need to reboot now)

8. After step 7, it should jump to the next screen automatically. If not, click

on More button at the end of tunnel ID 1.

9. The Tunnel Name is automatically from the last screen.

10.For the local secure group, to let the entire US office users access this

VPN tunnel, enter the local subnet 192.168.1.0 and subnet mask

255.255.255.0.

11.For the remote secure group, to let the entire German office users access

this VPN tunnel, enter the remote subnet 192.168.2.0 and subnet mask

255.255.255.0.

12.Enter the IP address of the German’s WAN port. In this case, it is

- 5 -

OvisLink 8000VPN VPN Guide

192.168.254.2.

13.Enter local and remote SPI. The local SPI we set is 12345 and remote

SPI 67890.

14.Encryption Protocol is ESP.

15.Encryption Algorithm is 3DES.

16.Encryption Keys are “1234567890123456”, “2222222222222222”,

and “3333333333333333” (16 Arabic numerals per key).

17.Set the key Life Time to 3000 and the Life Time Unit to Second.

18.Click on Save button at the bottom of the page.

19.To make effect all these configuration setups, we are rebooting the router.

Click on the Reboot button at the bottom of the page. When a dialog

pop-up says “Reboot right now”, click OK to reboot the router.

18 17

14, 15

10, 11, 12

- 6 -

OvisLink 8000VPN VPN Guide

Germany Router Setup

1. After login to WL/IP-8000VPN, click on VPN button on top of the page.

5 6 8

2. Check VPN Enable

3. Check NetBIOS Broadcast Enable

4. Enter Max. number of tunnels as 1.

5. In tunnel ID 1, enter the Tunnel Name as USA.

6. In tunnel ID 1, enter the Method as Manual.

7. Click on Save button at the bottom of the page. (no need to reboot now)

8. After step 7, it should jump to the next screen automatically. If not, click

on More button at the end of tunnel ID 1.

9. The Tunnel Name is automatically from the last screen.

10.For the local secure group, to let the entire US office users access this

VPN tunnel, enter the local subnet 192.168.2.0 and subnet mask

255.255.255.0.

11.For the remote secure group, to let the entire German office users access

this VPN tunnel, enter the remote subnet 192.168.1.0 and subnet mask

255.255.255.0.

12.Enter the IP address of the German’s WAN port. In this case, it is

- 7 -

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali AirLive Router di rete

AirLive

AirLive Ether-GSH8TW v2 Manuale utente

AirLive

AirLive VOIP-440S Manuale utente

AirLive

AirLive POE-FSH804 Manuale utente

AirLive

AirLive WN-300ARM-VPN Manuale utente

AirLive

AirLive IP-2000VPN Manuale utente

AirLive

AirLive Ether-FSH24 Manuale utente

AirLive

AirLive VoIP SIP Series Manuale utente

AirLive

AirLive AirMax5N/ESD Manuale utente

AirLive

AirLive ARM-201E Manuale utente

AirLive

AirLive GW-300R Manuale utente

AirLive

AirLive WN-300ARM-VPN Manuale utente

AirLive

AirLive WL-5470POE Manuale utente

AirLive

AirLive AC-1200UR Manuale utente

AirLive

AirLive WL-5470AP Manuale utente

AirLive

AirLive VoIP 400 Series Manuale utente

AirLive

AirLive A.DUO Manuale utente

AirLive

AirLive WL-5480PAP Manuale utente

AirLive

AirLive Ether-FSH2400N Manuale utente

AirLive

AirLive POE-48PB Manuale utente

AirLive

AirLive POE-FSH1608 Manuale utente

AirLive

AirLive WT-2000 ARM Manuale utente

AirLive

AirLive Ether-FSH2400RS Manuale utente

AirLive

AirLive WN-220R Manuale utente

AirLive

AirLive WN-151ARM Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza