Manuals / Allied Telesis / Computer Equipment / Network Router

Allied Telesis VPN manual Add the IP Security Policy Management snap-in

Models: VPN

1 29

Download 29 pages 39.53 Kb

Page 9

Add the IP Security Policy Management snap-in

Configuring the VPN client > Add the IP Security Policy Management snap-in

Add the IP Security Policy Management snap-in

Note: You need to know the public IP address for the router from your Internet Service Provider (ISP) for this configuration.

This example assumes that you have already set up your internet connection.

1.On your desktop, select Start > Run and enter the following command: mmc

This opens the Console window, as shown in the following figure.

2.Select Console Root > Add/Remove Snap-In.

This opens the Add/Remove Snap-inwindow, as shown in the following figure.

Page 9 AlliedWare™ OS How To Note: VPNs with Windows 2000 clients, without NAT-T

Image 9

Allied Telesis VPN manual Add the IP Security Policy Management snap-in, Select Console Root Add/Remove Snap-In

Contents

Introduction AlliedWareTM OSConsider the following typical scenario Which products and releases does it apply to? Related How To NotesExample network Security issuePerform initial security configuration on the router Configuring the router1. Perform initial security configuration on the router, on this page 5. Set the router to use the configuration on pageNote Comments are indicated in the script below using the # symbol The configuration script# add radius server=your-RADIUS-server-address secret=secret-key add ip int=vlan1 ip=office-private-LAN-address# Firewall enable fire create fire poli=main Set the router to use the configuration set conf=vpn.cfgcreate conf=vpn.cfg set conf=vpn.cfg z Configure the connection on page Configuring the VPN clientAdd a new registry entry z Add a new registry entry, on this page2. Select Console Root Add/Remove Snap-In Add the IP Security Policy Management snap-in3. Click Add This opens the Add Standalone Snap-In window4. Click Add 5. Click Finish, then Close, then OK, to return to the Console windowCreate an IP Security Policy 2. Select Create IP Security PolicyConfiguring the VPN client Create an IP Security Policy 4. Click Next Configuring the VPN client Create an IP Security PolicyCreate an IP Security Rule 3. Click Next Page Create an IP Filter 4. Click Next This opens the IP Traffic Destination window. Select A specific IP Address from the Destination address drop-down box, as shown in the following figure. Enter the destination IP address of your Allied Telesyn router. This must be a valid Internet address Configuring the VPN client Create an IP Filter 7. Click Next8. Click Next 9. Click Finish, then on the IP Filter List window, click Close 10. Select L2TP Tunnel Filter and click Next11. Click Next 13. Click and then right-click on To Head Office, and select Assign. The policy is now assigned or enabled on your PC host, indicated by Yes in the Policy Assigned column, as shown in the following figure 2. Double-click the Network and Dial-Up Connection folder Configure the connectionThe next window lets you assign an associated dialled call or select Do not dial the initial connection. Selecting Do not dial the initial connection is appropriate if you will have LAN access available before initiating the VPN call for example, if you have a cable modem 7. Click Next 10. Click Properties 11. Click OK Testing the tunnel TroubleshootingChecking the connection from the Windows client Closing the connection