Cisco Systems WRV54G manual Environment

Page 74

Wireless-G VPN Boradband Router

Appendix C: Configuring IPSec between a Windows 2000 PC and the Router

Introduction

This document demonstrates how to establish a secure IPSec tunnel using preshared keys to join a private network inside the VPN Router and a Windows 2000 or XP PC. You can find detailed information on configuring the Windows 2000 server at the Microsoft website:

Microsoft KB Q252735 - How to Configure IPSec Tunneling in Windows 2000

http://support.microsoft.com/support/kb/articles/Q252/7/35.asp

Microsoft KB Q257225 - Basic IPSec Troubleshooting in Windows 2000

http://support.microsoft.com/support/kb/articles/Q257/2/25.asp

NOTE: Keep a record of any changes you make. Those changes will be identical in the Windows “secpol” application and the Router’s Web-Based Utility.

Environment

The IP addresses and other specifics mentioned in this appendix are for illustration purposes only.

Windows 2000 or Windows XP

IP Address: 140.111.1.2 <= User ISP provides IP Address; this is only an example.

Subnet Mask: 255.255.255.0

WRV54G

WAN IP Address: 140.111.1.1 <= User ISP provides IP Address; this is only an example.

Subnet Mask: 255.255.255.0

LAN IP Address: 192.168.1.1

Subnet Mask: 255.255.255.0

Appendix C: Configuring IPSec between a Windows 2000 PC and the Router

70

Introduction

Image 74

Contents 802 GHz .11g Wireless- G Word definition How to Use this GuideCopyright and Trademarks Table of Contents Wireless Security Frequently Asked QuestionsIntroduction WelcomeWhat’s in this Guide? Wireless-G Broadband VPN Router IP Addresses Planning your Wireless NetworkRouter’s Functions What’s an IP Address?Dynamic IP Addresses Why do I need a VPN?Dhcp Dynamic Host Configuration Protocol Servers What is a VPN? VPN Router to VPN Router Wireless-G VPN Broadband Router Getting to Know the Wireless-G VPN Broadband Router Back PanelFront Panel DMZConnecting the Wireless-G Broadband Router OverviewWired Connection to a PC Wireless Connection to a PCWireless-G VPN Broadband Router Configuring the PCs Configuring Windows 98 and Millennium PCsConfiguring Windows 2000 PCs PropertiesConfiguring Windows XP PCs Wireless Configuring the RouterSetup Security Access RestrictionsAdministration Applications & GamingBasic Setup Tab How to Access the Web-based UtilitySetup Tab Internet SetupStatic Internet Connection Type Optional Settings Required by some ISPs Pptp Internet Connection TypeNetwork Setup Ddns Tab DynDNS.orgMAC Clone MAC Address Clone Tab See FigureAdvanced Routing Tab Advanced RoutingStatic Routing 10 Routing TableWireless Network Wireless TabBasic Wireless Settings See Figure Wireless Security WEP See FigureWireless Network Access See Figure 13 Wireless Network AccessAdvanced Wireless Settings See Figure 15 Advanced Wireless SettingsSecurity Tab FirewallVPN 18 Manual Key Management 19 Advanced VPN Tunnel Setup WEP Access Restrictions Tab Access Restriction23 Internet Filter Summary Applications and Gaming Tab Port Range ForwardingPort Triggering 27 Port TriggeringUPnP Forwarding 28 UPnP ForwardingDMZ Management Administration TabRouter Password Email Alert LogUPnP Syslog NotificationAlert Log DiagnosticsNotification Queue Length General Log33 Factory Default Information StatusRouter WAN ConnectionsLocal Network 36 Local Network38 Wireless System PerformanceNeed to set a static IP address on a PC Appendix a TroubleshootingCommon Problems and Solutions Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router TCP UDP Can’t get the Internet game, server, or application to work Firmware upgrade failed, and/or the Power LED is flashing To start over, I need to set the Router to factory defaultNeed to upgrade the firmware My DSL service’s PPPoE is always disconnecting Power LED flashes continuouslyIs IPSec Pass-Through supported by the Router? Frequently Asked QuestionsWhere is the Router installed on the network? Does the Router support IPX or AppleTalk?What is Network Address Translation and what is it used for? Does the Router support ICQ send file?How can I block corrupted FTP downloads? Is the Router cross-platform compatible? What is DMZ Hosting?What are the advanced features of the Router? How many ports can be simultaneously forwarded?What is ad-hoc mode? What is the Ieee 802.11g standard?What Ieee 802.11b features are supported? What is infrastructure mode?What is DSSS? What is FHSS? And what are their differences? What is ISM band?What is Spread Spectrum? What is WEP?Have excellent signal strength, but I cannot see my network How do I reset the Router?How do I resolve issues with signal loss? What Are The Risks? Appendix B Wireless SecurityBrief Overview Passive Attacks Jamming AttacksDictionary-Building or Table Attacks Maximizing Wireless SecurityActive Attacks Man-in-the-Middle Attacks5SSID 8WEP Wireless-G VPN Broadband Router 4GHz/802.11b and 802.11g WEP Encryption Figure B-2 WEPEnvironment WRV54GBuild Filter Lists How to Establish a Secure IPSec TunnelCreate an IPSec Policy Filter List 1 win-routerFilter List 2 router-win Figure C-4 IP Filter ListFigure C-7 IP Filter List Configure Individual Tunnel Rules Tunnel 1 win-routerFigure C-13 Authentication Methods Figure C-16 Tunnel Setting Tab Tunnel 2 router-winFigure C-19 IP Filter List Tab Figure C-22 Preshared Key Assign New IPSec Policy Figure C-25 Connection TypeCreate a Tunnel Through the Web-Based Utility Figure C-28 VPN TabFigure D-1 IP Configuration Screen Windows 98 or Me InstructionsWindows 2000 or XP Instructions Figure D-3 MAC Address/Physical AddressAppendix E Snmp Functions Figure F-1 Upgrade Firmware Appendix F Upgrading FirmwareNetwork Neighborhood/My Network Places Appendix G Windows HelpShared Resources Appendix H Glossary Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router Wireless-G VPN Broadband Router Up to 54Mbps wireless, up to 100 Mbps LAN Appendix I SpecificationsTransmit Power 19dBm LEDs Appendix J Regulatory Information FCC StatementFCC Part 68 Statement Safety Notices Appendix K Warranty Information Limited WarrantyAppendix L Contact Information