Manuals / Allied Telesis / Computer Equipment / Network Router

Allied Telesis VPN manual Create an IP Security Rule

Models: VPN

1 29

Download 29 pages 39.53 Kb

Page 13

Create an IP Security Rule

Configuring the VPN client > Create an IP Security Rule

5.Click Next. You have now completed the IP Security Policy Wizard, as shown in the following figure.

6.Leave the Edit properties checkbox checked. Click Finish.

Create an IP Security Rule

1.Clicking Finish in the previous step opens the IP Security Policy Properties window, as shown in the following figure.

Page 13 AlliedWare™ OS How To Note: VPNs with Windows 2000 clients, without NAT-T

Image 13

Allied Telesis VPN manual Create an IP Security Rule

Contents

AlliedWareTM OS IntroductionConsider the following typical scenario Which products and releases does it apply to? Related How To NotesExample network Security issuePerform initial security configuration on the router Configuring the router1. Perform initial security configuration on the router, on this page 5. Set the router to use the configuration on pageNote Comments are indicated in the script below using the # symbol The configuration script# add radius server=your-RADIUS-server-address secret=secret-key add ip int=vlan1 ip=office-private-LAN-address# Firewall enable fire create fire poli=main set conf=vpn.cfg Set the router to use the configurationcreate conf=vpn.cfg set conf=vpn.cfg z Configure the connection on page Configuring the VPN clientAdd a new registry entry z Add a new registry entry, on this page2. Select Console Root Add/Remove Snap-In Add the IP Security Policy Management snap-in3. Click Add This opens the Add Standalone Snap-In window4. Click Add 5. Click Finish, then Close, then OK, to return to the Console window2. Select Create IP Security Policy Create an IP Security PolicyConfiguring the VPN client Create an IP Security Policy 4. Click Next Configuring the VPN client Create an IP Security PolicyCreate an IP Security Rule 3. Click Next Page Create an IP Filter 4. Click Next This opens the IP Traffic Destination window. Select A specific IP Address from the Destination address drop-down box, as shown in the following figure. Enter the destination IP address of your Allied Telesyn router. This must be a valid Internet address 7. Click Next Configuring the VPN client Create an IP Filter8. Click Next 9. Click Finish, then on the IP Filter List window, click Close 10. Select L2TP Tunnel Filter and click Next11. Click Next 13. Click and then right-click on To Head Office, and select Assign. The policy is now assigned or enabled on your PC host, indicated by Yes in the Policy Assigned column, as shown in the following figure 2. Double-click the Network and Dial-Up Connection folder Configure the connectionThe next window lets you assign an associated dialled call or select Do not dial the initial connection. Selecting Do not dial the initial connection is appropriate if you will have LAN access available before initiating the VPN call for example, if you have a cable modem 7. Click Next 10. Click Properties 11. Click OK Troubleshooting Testing the tunnelChecking the connection from the Windows client Closing the connection