SonicWALL none manual Peer Connection

Page 46

<UseDefaultGWAsPeerIP>0</UseDefaultGWAsPeerIP>

<InterfaceSelection>0</InterfaceSelection>

<WaitForSourceIP>0</WaitForSourceIP>

<DialupUseMicrosoftDUN>1</DialupUseMicrosoftDUN> <DialupApp>c:\program files\aol\aol.exe</DialupApp> <DialupPhonebook>text</DialupPhonebook> <DialupLeaveConnected>0</DialupLeaveConnected> <DPDInterval>5</DPDInterval> <DPDAttempts>3</DPDAttempts> <DPDAlwaysSend>0</DPDAlwaysSend>

</Peer>

<Peer>

<HostName>1.2.3.4</HostName>

<EnableDeadPeerDetection>1</EnableDeadPeerDetection>

<ForceNATTraversal>0</ForceNATTraversal>

<DisableNATTraversal>0</DisableNATTraversal>

<NextHop>0.0.0.0</NextHop>

<Timeout>3</Timeout>

<Retries>3</Retries>

<UseDefaultGWAsPeerIP>0</UseDefaultGWAsPeerIP>

<InterfaceSelection>0</InterfaceSelection>

<WaitForSourceIP>0</WaitForSourceIP>

<DialupUseMicrosoftDUN>1</DialupUseMicrosoftDUN> <DialupApp>c:\program files\aol\aol.exe</DialupApp> <DialupPhonebook>text</DialupPhonebook> <DialupLeaveConnected>0</DialupLeaveConnected> <DPDInterval>5</DPDInterval> <DPDAttempts>3</DPDAttempts> <DPDAlwaysSend>0</DPDAlwaysSend>

</Peer>

</Connection>

<Connection name="Office Gateway">

<Description>This is the firewall to connect when traveling overseas.</Description>

<Flags>

<AutoConnect>0</AutoConnect>

<ForceIsakmp>1</ForceIsakmp>

<ReEnableOnWake>0</ReEnableOnWake>

Appendix A - Creating and Deploying the Default.rcf File for Global VPN Clients Page 45

Image 46
Contents Global VPN Client Administrators Guide Table of Contents Configuring SonicWALL Security Appliances for Managing VPN Connection PoliciesInstallShield Silent Response File Appendix a Creating and Deploying the Default.rcf File forAppendix B SonicWALL Global VPN Client Installation Using Command Line InterfaceAppendix D Installing the Global VPN Client with a Appendix E- Log Viewer MessagesSonicWALL Global VPN Client Features SonicWALL Global VPN ClientNew Features in SonicWALL Global VPN Client Global VPN Client Enterprise/Global Security Client Using the Right Administrator’s GuidesAbout this Guide SonicWALL Global Security Client and Global VPN ClientCopyright Notice Conventions Used in this GuideIcons Used in this Guide SonicWALL Pocket Global VPN ClientInstalling the SonicWALL Global VPN Client Limited WarrantyUsing the Setup Wizard Installing the SonicWALL Global VPN Client Adding VPN Connection Policies Understanding VPN Connection PoliciesUnderstanding Digital Certificates Using the New Connection WizardCreating a VPN Connection Policy Select Remote Access or Office Gateway and then click Next Importing a VPN Configuration File Configuring a Dial-Up VPN Connection Launching the SonicWALL Global VPN Client Making VPN ConnectionsAccessing Redundant VPN Gateways Enabling a VPN Connection Connecting changes to ProvisioningEstablishing Multiple Connections Entering a Pre-Shared Key Username and Password AuthenticationSelecting a Certificate Checking the Status of a VPN Connection Disabling a VPN ConnectionConnection Warning Creating a VPN Policy Shortcut Managing the Global VPN Client System Tray Icon Specifying Global VPN Client Launch OptionsOpen SonicWALL Global VPN Client Opens the program window Managing VPN Connection Policy Properties GeneralUser Authentication Peers Peer Information Dialog BoxManaging VPN Connection Policy Properties Connection Virtual IP ConfigurationStatus ActivityRenaming a Connection Policy Managing VPN Connection PoliciesArranging Connection Policies Deleting a Connection PolicyTroubleshooting the SonicWALL Global VPN Client Managing CertificatesType The type of message Information, Error, or Warning Understanding the Global VPN Client LogConfiguring the Log Configuring Auto-LoggingGenerating a Help Report Viewing Help Topics Accessing Technical SupportUninstalling the SonicWALL Global VPN Client Windows 98 SE Double-clickAdd/Remove ProgramsSonicWALL Global VPN Client Licenses Group VPN Connections Supported by Each SonicWALL ModelDownloading Global VPN Client Software and Documentation Select Global VPN Client from the Applicable Services menuActivating Your SonicWALL Global VPN Clients Global VPN Client License Support by SonicWALL ModelSoftware License Agreement for Sonicwall Globalvpn Client Exports License Miscellaneous Deploying the default.rcf File How the Global VPN Client uses the default.rcf FileSonicWALL Global VPN Client Support Replace the Existing SonicWALL Global VPN Client.rcf File SWClientPolicy version =9.0 Creating the default.rcf File Default.rcf File Tag Descriptions FlagsPage SWClientPolicy version=9.0 Connections Sample default.rcf FileSWClientPolicy Flags PeerPeer Connection Peer Connection Connections /SWClientPolicy Troubleshooting the deafult.rcf File Creating the Silent InstallationSetup.exe -s Playing Back the Silent InstallationUsing Setup.log to Check for Errors Setup.exe -s -f1path\ResponseFileCommand Line Options Command Line ExamplesAppendix E- Log Viewer Messages Log Viewer MessagesDiffie-Hellman group generator length has not been set Failed to build dead peer detection packet Failed to construct quick mode hash payload Failed to find Oakley group specified in the SA payload Failed to set the Ipsec ESP attributes into the phase 2 SA Is not a valid XAuth status Info Peer certificate missing key value Received invalid message ID notify Sending phase 2 delete for SA lifetime for phase 2 is seconds Received an unencrypted packet when crypto active SonicWALL Global VPN Client 4.0 Administrator’s Guide SonicWALL, Inc Rev C, 10/07