Microsoft VPN

Remote IP addresses

Type

Single address - enter an IP address in the "Start IP address"

 

field.

 

Range address - enter the starting IP address in the "Start IP

 

address" field, and the finish IP address in the "Finish IP ad-

 

dress" field.

 

Subnet address - enter the desired IP address in the "Start IP

 

address" field, and the network mask in the "Subnet Mask" field.

 

The remote VPN should have these IP addresses entered as it's

 

"Local" addresses.

 

 

3.Click Next to continue. The screen you will see depends on whether you previously se- lected "Manual Key Exchange" or "IKE".

Manual Key ExchangeFigure54: VPN Wizard - Manual Key Exchange Screen

These settings must match the remote VPN. Note that you cannot use both AH and ESP.

Manually assigned Keys

AH Authentication AH (Authentication Header) specifies the authentication protocol for the VPN header, if used. (AH is often NOT used)

If AH is not enabled, the following settings can be ignored.

Keys

The "in" key here must match the "out" key on the remote VPN, and the "out" key here must match the "in" key on the remote VPN.

Keys can be in ASCII or Hex (0..9 A..F)

For MD5, the keys should be 32 hex/16 ASCII characters.

For SHA-1, the keys should be 40 hex/20 ASCII characters.

81