LevelOne Broadband VPN Gateway User Guide
Example 2: Windows 2000/XP Client to LAN
In this example, a Windows 2000/XP client connects to the LevelOne Broadband VPN Gate- way and gains access to the local LAN.
Figure 63: Windows 2000/XP Client to LevelOne Broadband VPN Gateway
To use 3DES encryption, you need Service Pack 3 or later installed on Windows 2000.
LevelOne Broadband VPN Gateway Configuration
Setting |
| Value | Notes |
|
|
|
|
Name |
| Win Client | Name does not affect operation. Select a |
|
|
| meaningful name. |
|
|
|
|
Remote Endpoint |
| 172.16.9.10 | Other endpoint's WAN (Internet) IP address. |
|
|
|
|
Local |
| Subnet address: | Allows access to entire LAN. Use a more |
IP addresses |
| 192.168.0.0 | restrictive definition if possible. |
|
| 255.255.255.0 |
|
|
|
|
|
Remote |
| 172.16.9.10 | For a single client, this is the same as the |
IP addresses |
|
| Gateway. |
|
|
|
|
Key Exchange |
| IKE | Must match |
|
|
|
|
IKE SA Parameters |
|
| |
|
|
| |
IKE Direction |
| Responder | Only want to accept client connections. |
|
|
|
|
Local Identity |
| IP address | Required. |
|
|
|
|
Remote Identity |
| IP address | Required |
|
|
|
|
IKE Authentication |
| Certificates are not widely used. | |
method |
|
|
|
|
|
|
|
| Xxxxxxxxxx | Must match client PC | |
|
|
|
|
IKE Authentication |
| Must match client PC | |
algorithm |
|
|
|
|
|
|
|
IKE Encryption |
| 3DES | Must match client PC |
|
|
|
|
IKE Exchange |
| Main Mode | Must match client PC |
mode |
|
|
|
|
|
|
|
88