Asante Technologies VR2004 user manual IPSec Keying IKE Mode, Remote IP Network

Page 45

PC A	Internet	VR2004



	WAN IP: 172.16.0.123	WAN IP: 10.10.0.123
	Netmask: 255.255.255.0	Netmask: 255.255.255.0
	Virtual LAN IP: 192.168.123.0	LAN IP: 192.168.100.254

Mode 2

•Remote IP Network: 192.168.123.0

•Remote Netmask: 255.255.255.0

•Remote Gateway IP: 172.16.0.123

•Network Interface: The interface on the router used to communicate with the remote network. Most users should leave this set to WAN ETHERNET

•Local IPSEC Identifier: Allows you to identify multiple tun- nels and does not have to match the name used at the other end of the tunnel. The default value is Local.

•Remote IPSEC Identifier: Allows you to identify multiple tunnels and does not have to match the name used at the other end of the tunnel. The default value is Remote.

Note: If you do not know the Remote Gateway IP of the remote client, you can enter 0.0.0.0. However, the VPN connection request must then be initiated by the client. If you select Manual Mode, you must enter the Remote Gateway IP address.

4.3IPSec Keying (IKE Mode)

A VPN tunnel is formed of two separate Secure Associations, or SAs. One SA is used for traffic in each direction, and the router will keep track of both SAs for you. Since the router is going to be en- crypting the packets that are sent across an unsecured network (the Internet), it needs a way to share a key so that each router can de- crypt the data it receives.

User’s Manual	45

Image 45

Contents User’s Manual FriendlyNET VR2004 SeriesBefore You Start Determine Your TCP/IP Settings Quick Start GuideMac OS Item No TCP/IP Control Panel Description Your Setting Windows 98/Me Description Your SettingWindows NT/2000 Item No IP Configuration Description Your SettingWindows XP Red Hat Linux Install The HardwareConfigure Your Router FriendlyNET VPN Security Router Table of Contents FriendlyNET VPN Security Router Introduction FeaturesIsakmp IPSec SecurityPackage Contents System RequirementsFront and Rear Panel Descriptions LED Setup Wizard ConfigurationTime Zone Settings Device IP SettingsISP Settings Additional ISP Settings Enable Pptp Client Wireless Settings VR2004AC only Modem Settings WEP Security and Apple Airport Wireless CardsEncryption Save and Restart VPN SettingsDevice Information Device StatusUp and running Not working ---------l l System Tools FriendlyNET VPN Security Router Dhcp Server Settings Advanced SettingsVirtual Server Settings IP Address Pool RangeIP Address Reservation Page Wireless Access Control Settings Static Routing Table Routing SettingsDynamic Routing Settings LAN Filter Settings Filter SettingsWAN Filter Settings IP Address Range 192.168.123.10 toIP Address Range 172.16.203.1 to Password Settings Administrative SettingsRemote System Administration System Log MiscellaneousSystem Parameters Dynamic DNS Settings Mail Alert URL Filter SettingsSave and Restart FriendlyNET VPN Security Router Network-to-Network VPN ConfigurationLAN VR2004 ‘A’ West end Connection Name West-East Mode 2-Static fixed IP Address Mode 1- Dynamic IP AddressClient-to-Network Remote IP Network Remote IP Netmask Remote Gateway IPRemote IP Network IPSec Keying IKE ModeEncryption Protocol Perfect Forward SecurePre-Shared Key Manual ModeKey Life IKE Life TimeAuthentication Protocol Incoming and Outgoing SPI Security Parameter IndexEncryption Key Authentication Key FriendlyNET VPN Security Router Appendix A. Warranty Statement and FriendlyCare Support On-line Support Personalized SupportAsanté Forums Appendix B. FCC Statement FriendlyNET VPN Security Router Troubleshooting with the Status LEDs Appendix C. TroubleshootingProblems Accessing Router Using Windows PingUsing Macintosh WhatRoute Cabling Problems Other hints about cabling Windows 98/Me Appendix D. Renewing Client IP AddressesWindows NT/2000 MacintoshFriendlyNET VPN Security Router Port Service Appendix E. Service PortsFriendlyNET VPN Security Router Protocols Supported Appendix F. Hardware and Software CompatibilityNetwork and Client Platforms compatibility Application Software CompatibilityFriendlyNET VPN Security Router Software Overview Appendix G. SpecificationsAdvanced Settings Applications Interoperability Performance Red Hat Linux Appendix H. Configuring a System Log ServerMac OS Click on the Firewall tab and click New... to add a new rule Microsoft Windows Optimum Performance Appendix I. Your 802.11b Wireless NetworkSecurity Administrator’s PasswordWEP Encryption MAC Address ControlSales