Multitech RouteFinder RF850 Manuale utente

IPSec VPN Client

and the

RouteFinder®RF850/RF860

Setup Examples

Reference Guide

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 2

IPSec VPN Setup Client and the RouteFinder 850/860 Setup Examples

Reference Guide

PN S000433B Revision B

This publication may not be reproduced, in whole or in part, without prior expressed written permission from Multi-

Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof and specifically

disclaims any implied warranties of merchantability or fitness for any particular purpose. Furthermore, Multi-Tech

Systems, Inc. reserves the right to revise this publication and to make changes from time to time in the content hereof

without obligation of Multi-Tech Systems, Inc. to notify any person or organization of such revisions or changes.

Revision Date Description

A 04/05/07 Initial release with RouteFinder software 3.32. Updated the Technical Support

contract list.

B 05/07/08 Updated for software 3.34 and some minor edits.

Trademarks

The Multi-Tech logo is a registered trademark of Multi-Tech System, Inc. Windows is a trademark of Microsoft. All

other trademarks are owned by their respective companies.

World Headquarters

Multi-Tech Systems, Inc.

2205 Woodale Drive

Mounds View, Minnesota 55112

Phone: 763-785-3500 or 800-328-9717

Fax: 763-785-9874

Internet Address: http://www.multitech.com

Technical Support

Country By Email By Phone

Europe, Middle East, Africa: [email protected] +44 118 959 7774

U.S., Canada, all others: support@multitech.com 800-972-2439 or 763-717-5863

Table of Contents

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 3

Contents

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example ................................................................................4

Set Up a VPN Client Using IPSec VPN Client Software and a RouteFinder ...................................................4

Chapter 2 – NAT Setup Example with IPSec and RouteFinder ..............................................................................10

Set Up a VPN Client Using IPSec VPN Client Software and a RouteFinder .................................................10

Chapter 3 – A Reference Table of Commonly Supported Subnets........................................................................17

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 4

VPN Client Setup

Chapter 1 – Non-NAT IPSec and

RouteFinder Setup Example

Set Up a VPN Client Using IPSec VPN Client

Software and a RouteFinder

First, in this non-NAT example, set up the VPN client using the IPSec VPN Client software. Then set up

the VPN tunnel for the RouteFinder using the RouteFinder software.

Step 1 – VPN Client Side Set Up (Phase 1)

1. Open the IPSec VPN Client software.

2. Right click on RouteFinder Client VPN Configuration and select New Phase 1.

3. Enter a name for your connection in the Name field.

4. Choose Any for the client Interface if your IP address is dynamic or the IP address provided

by your ISP if Static (e.g., 65.126.90.250).

5. In the Remote Gateway field, enter the IP address of the VPN WAN for your Remote

Gateway (e.g., 65.126.90.248).

6. Enter the Shared Secret in Preshared Key for your network (the Secret has to match on both

ends). Then Confirm the shared secret by retyping the shared secret.

7. For IKE Authentication choose MD5.

8. For Key Group choose DH1024.

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 5

VPN Client Setup

Step 2 – VPN Client Side Set Up (Phase 2)

1. Start Phase 2 by right clicking on the name of your VPN Client you created in Phase 1.

2. The VPN Client address will be set to 0.0.0.0 unless you have a Static IP address (e.g.,

65.126.90.250).

3. The Address type is the type of setup on the host side. If it’s a network, then choose

Subnet address from the drop down list box and enter the Remote LAN address (e.g.,

192.168.25.0) and the Subnet Mask (e.g., 255.255.255.0). If it’s a single IP address,

change it to that address.

4. For ESP Authentication choose MD5.

5. Accept the default Tunnel Mode.

6. For PFS Group choose DH1024.

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 6

RouteFinder Setup

Step 3 – Set Up a RouteFinder

Step 3.1 – Network & Services > Network

1. Login to your RouteFinder software and go to the Networks & Services > Network

screen.

2. Click the Add button to open the fields for entering your network information.

3. Create a new network name for the VPN Client by entering a Name,IP Address, and

Subnet Mask. For this example, enter the following:

Name: VPN-Client

IP Address: 65.126.90.250

Subnet Mask: 255.255.255.255

Note: The same address/mask pair should not be present in the current list displayed on

the screen.

4. Click the Add button to add "VPN-Client" to the network list. It will display at the bottom of

the screen.

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 7

RouteFinder Setup

Step 3.2 – Packet Filters

1. Go to the Packet Filters screen to set the VPN client so it has right to access your network.

The Packet Filter rights established on this screen give the client access across the tunnel to

your host network.

2. In the System Defined Rules section, uncheck the Status box, if a check mark is present.

3. In the Add User Defined Packet Filter Rules section, click on From (Host/Networks) and

select the network to be allowed.

In this example, select VPN-Client.

4. If you are not restricting the type of Service, select Any.

5. If you are not restricting any Network, click on To (Host/Network), and select Any.

Notes:

•If the client is dynamic (unknown), set up an Any Any Any ACCEPT filter to allow any

network to come in.

•You will need to add LAN Any Any ACCEPT to the User Defined Packet Filter Rules. If

you want this rule to be in the first position so that it takes precedence over the VPN-

Client rule, select the Move command, and move this rule to the first position.

Step 3.3 – VPN Setup

1. Go to the VPN > IPSec screen.

2. Click the VPN Status check box to enable IPSec. Then click the Save button.

3. Select Add IKE Connection by clicking the corresponding Add button.

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 8

RouteFinder Setup

Step 3.3 (Continued) – VPN Setup

The Add IKE Connection screen displays. All settings can be left at the default unless otherwise

indicated:

1. Connection Name: Enter in the name of the VPN tunnel you want to create. For this

example, enter VPN-Client.

2. Secret: Enter a password (this secret password has to match on both ends of the tunnel).

For this example, enter test.

3. Select Encryption: Select 3DES.

4. Local WAN IP: Select WAN

5. Local LAN: Select LAN

6. Remote Gateway IP: Select VPN-Client.

7. Remote LAN: Select None.

8. Click the Save button to save your tunnel.

Chapter 1 – Non-NAT IPSec and RouteFinder Setup Example

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 9

RouteFinder Setup

Step 3.3 (Continued) – VPN Setup

The VPN Status screen displays; this time with the newly-created VPN tunnel showing on the

bottom of the screen.

Important Note:

Make sure to check the Status box for this VPN tunnel in order to activate it.

Step 4 – Checking the Tunnel

To see if the tunnel is up you can click on Statistics & Logs and go to the IPSec > IPSec Live

Connections. You will see whether or not the connection is up. You will also see information about

the data, if any, that is being sent across the tunnel.

Chapter 2 – NAT Setup Example with IPSec and a RouteFinder

Multi-Tech Systems, Inc. IPSec VPN and RF850/860 Setup Examples – A Reference Guide (S000433B) 10

VPN Client Setup

Chapter 2 – NAT Setup Example

with IPSec and RouteFinder

Set Up a VPN Client Using IPSec VPN Client

Software and a RouteFinder

First, in this NAT example, set up the VPN client in the IPSec VPN Client software. Then set up the VPN

tunnel for the RouteFinder using the RouteFinder software.

Step 1 – VPN Phase 1 Client Setup (Behind NAT)

1. Open the IPSec VPN Client software.

2. Right click on RouteFinder Client VPN Configuration and select New Phase 1.

3. Enter the name of your connection in the Name field.

4. Choose Any for the client Interface if your IP address is dynamic or the if the IP address is

provided by your LAN (a Static IP Address). Example: 198.168.2.8.

5. Enter the IP address of the VPN WAN for your Remote Gateway. Example: 65.126.90.248.

6. Enter the Shared Secret in Preshared Key for your network (the secret has to match on both

ends). Then Confirm the shared secret by entering the Shared Secret again.

7. For IKE Authentication choose MD5.

8. For Key Group choose DH1024.

9. Click the P1 Advanced button.

Altri manuali per RouteFinder RF850

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali Multitech Router di rete

Multitech

Multitech MultiVOIP 100 (MVP110 Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech MultiConnect rCell 100 MTR-H5 Manuale utente

Multitech

Multitech MultiFrad FR3100 Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech RouteFinder RF600VPN Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech ROUTE FINDER RFIPSC-10 Manuale utente

Multitech

Multitech MultiFRAD FR2201 Manuale utente

Multitech

Multitech RouteFinder RF102S Manuale utente

Multitech

Multitech RouteFinder RF600VPN Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Istruzioni per l'installazione

Multitech

Multitech Embedded Modem Manuale utente

Multitech

Multitech MultiConnect rCell MTR-H6 Manuale utente

Multitech

Multitech MultiConnect rCell MTR-H5 Manuale di istruzioni

Multitech

Multitech RouteFinder RF550VPN Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech MultiConnect rCell 100 Series Manuale utente

Multitech

Multitech rCell 500 Series Manuale utente

Multitech

Multitech RouteFinder MTASR2-201 Manuale utente

Multitech

Multitech RouteFinder RF825-C-Nx Manuale utente

Multitech

Multitech RouteFinder RF560VPN Manuale utente

Multitech

Multitech RouteFinder RF825-C-Nx Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

TP-Link

TP-Link TD-8817 Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza