Allied Telesis NetScreen Routers manual What information will you find in this document?

Page 2

What information will you find in this document?

This How To Note begins with the following information:

z"Related How To Notes" on page 2

z"Which products and software version does it apply to?" on page 2 Then it describes the configuration, in the following sections:

z"The network" on page 3

z"How to configure the Allied Telesis router" on page 4

z"How to configure the SonicWALL router" on page 12

z"How to test the tunnel" on page 29

z"How to use the CLI instead of the GUI" on page 30

Related How To Notes

Allied Telesis offers How To Notes with a wide range of VPN solutions, from quick and simple solutions for connecting home and remote offices, to advanced multi-feature setups. Notes also describe how to create a VPN between an Allied Telesis router and equipment from a number of other vendors.

For a complete list of VPN How To Notes, see the Overview of VPN Solutions in How To Notes in the How To Library at www.alliedtelesis.com/resources/literature/howto.aspx.

Which products and software version does it apply to?

The VPN wizard is available on the following Allied Telesis routers, running Software Version 2.9.1 or later:

zAR415S

zAR440S, AR441S, AR442S

You can use the command line to set up an equivalent configuration on AR700 and other AR400 Series routers. See "How to use the CLI instead of the GUI" on page 30 for the necessary commands.

We created this example with a SonicWALL TZ 170, running SonicOS Enhanced 2.5.1.1-65e. SonicOS Standard does not support NAT-T draft 3, so this solution requires SonicOS Enhanced.

The screenshots in this Note are from an Internet Explorer 6.0 browser running on Windows XP.

Page 2 AlliedWare™ OS How To Note: VPNs with SonicWALL routers

Image 2
Contents AlliedWareTM OS Which products and software version does it apply to? Related How To NotesWhat information will you find in this document? Network RouterHow to configure the Allied Telesis router StartVPN tunnel 1. Open the Configuration Wizards Start the Site-to-Site VPN wizard Name the VPN connectionEnter the remote site’s WAN IP address Enter the remote site’s LAN IP addressCheck the settings Enter the shared secret keySpecify Peer IDs Check the settings again Finish the wizardManager Connect a PC to the router How to configure the SonicWALL routerAccess the Router Set the PC’s IP addressBrowse to the router’s management GUI Log on14 AlliedWare OS How To Note VPNs with SonicWALL routers Set the time zone Customise the router and set up the networkChange the administrator password Enter the WAN settings Choose the type of WAN addressSet up the Dhcp server Enter the LAN addressClick the Close button Log in again Define the LAN subnet of the peer Open the Address Objects summaryOpen the Custom Address Objects summary Define the address object22 AlliedWare OS How To Note VPNs with SonicWALL routers Return to the Configuration Wizards Create the VPNCreate the Site-to-Site policy Select the networks for each end of the LANSpecify security settings 26 AlliedWare OS How To Note VPNs with SonicWALL routers Set the VPN IKE IDs and use Main Mode Specify the Local and Peer IKE IDsSpecify IKE Main Mode If necessary, restart the routerPing the SonicWALL LAN How to test the tunnelCheck the tunnel status How to use the CLI instead of the GUI Wizard, for Remote Peer IP