Manuals / SMC Networks / Computer Equipment / Network Router

SMC Networks BR14VPN, SMCBR 18VPN manual IKE Proposal

Models: BR14VPN SMCBR 18VPN

1 73

Download 73 pages 4.98 Kb

Page 41

7.9.2 IKE Proposal

Options

•Select IKE proposal: Click this button to setup a set of frequently used IKE proposals for the dedicated tunnel.

•Select IPSec proposal: Click this button to setup a set of frequently used IPSec proposals for the dedicated tunnel.

The tunnel name is equal to the name you configured on the previous page of VPN settings. The IKE proposal index includes the settings for a set of frequently used IKE proposals and offers a selection of the IKE proposals. The IPSec proposal index includes the settings for a set of frequently used IPSec proposals and offers a selection of the IPSec proposals.

7.9.2 IKE Proposal

•IKE Proposal index: A list of selected proposal indexes from the IKE proposal pool. The selected activity is performed when you select a proposal ID and click the Add to button next to the Proposal ID roll-down list. A maximum of four indexes can be selected from the proposal pool for the dedicated tunnel.

•Proposal Name: The proposal name indicates which IKE proposal will be monitored. The first character of the name with the value of 0x00 stands for the IKE proposal that is not available.

•DH Group - Three groups can be selected:

oGroup 1 (MODP768)

oGroup 2 (MODP1024)

oGroup 5 (MODP1536)

•Encryption algorithm - Two algorithms can be selected:

o3DES

oDES

•Authentication algorithm - Two algorithms can be selected:

oSHA1

35

Image 41

SMC Networks BR14VPN, SMCBR 18VPN manual IKE Proposal

Contents

Page Trademarks CopyrightCompliances EC Conformance Declaration - Class B Important Safety Notices3 FUNCTIONS AND FEATURES 2 EQUIPMENT CHECKLIST5 HARDWARE INSTALLATION 6 NETWORK SETTINGS AND SOFTWARE INSTALLATION9 TROUBLESHOOTING 8 IPSEC SETTINGS GUIDE FOR REFERENCE/EXAMPLE ONLY10 TECHNICAL SPECIFICATIONS 7.9 Advanced Setup - VPN1 System Requirements 2 Equipment ChecklistAuto-sensing Ethernet Switch 3 Functions and FeaturesWeb-based Configuration Broadband Modem and NATFunction 4 Panel LayoutColor Status6 Network Settings and Software Installation 5 Hardware InstallationDefault Settings Administrator PasswordWindows 2000/XP 6.1 Installing TCP/IP Windows 95/98/Me6.2 Setting up TCP/IP Windows 95/98/Me 6.3 Obtaining an IP Address Windows 95/98/Me Windows NT1. From the Windows desktop click Start/Settings/Control Panel Windows 2000/XPPinging 192.168.2.1 with 32 bytes of data pingReply from 192.168.2.1 bytes=32 time=2ms TTL=64 Pinging 192.168.2.1 with 32 bytes of data Request timed outInternet Explorer 5 or above For Windows 7 Configuring Your Broadband VPN RouterInternet Explorer For Macintosh 7.1 Browser ConfigurationBroadband Type 7.3 Setup Wizard Time ZoneCable Modem PPPoE xDSL Fixed-IP xDSLPPTP L2TP BigPondDial-Up Page 7.4 Advanced Setup - SYSTEM Time Zone Remote Management Password SettingsSyslog Server 7.5 Advanced Setup - WAN Dynamic IP PPPoE PPTP Static IPL2TP BigPondDial Up This is the local IP address of the router. All networked computers must use the LAN IP address of the router as their default Gateway. However, if necessary, it can be changed. Here you can configure the LAN IP address for the router and enable/disable the DHCP server for dynamic client address allocation. You can change the lease time if necessary as well. By default this is set to “One Week”. The other options are Half Hour, One Hour, Two Hours, Half Day, One Day, Two Days, and Forever. “Forever” signifies that there is no time limit on the IP address lease 7.6 Advanced Setup - LANPage 7.7 Advanced Setup - NAT 7.7.1 Virtual ServerEnable Service PortServer IP 7.7.2 Special Applications7.8 Advanced Setup - FIREWALL 7.7.3 Virtual Computer7.8.1 Network Filters 7.8.2 URL Blocking 7.8.3 MAC Filter 7.8.4 Schedule Rule 7.8.5 Advanced 7.9 Advanced Setup - VPN 7.8.6 DMZ7.9.1 IPSec Tunnel Remote gateway The IP address of the remote gateway Basic setup IKE proposal setup IPSec proposal setup Basic SetupTunnel name Lists the monitored tunnel 7.9.2 IKE Proposal 7.9.3 IPSec Proposal DH Group - Three groups can be selected o Group 1 MODP768 Authentication algorithm - Two algorithms can be selected o SHA1o Group 2 MODP1024 o Group 5 MODP1536 However, you can also select None7.9.4 Dynamic VPN 7.9.5 PPTP/L2TP Server 7.10 Advanced Setup - SNMP Enable Static Routing by selecting the radio button next to Enable 7.11 Advanced Setup - ROUTING7.12 Advanced Setup - MISCELLANEOUS When this is enabled, the login page appears as follows 7.14 DDNS Dynamic DNS7.13 Advanced Setup - DISPLAY STATUS 7.16 Tools 7.15 UPnP Universal Plug-and-Play7.17 Status Page 8.1 Tunnel between two SMCBR14VPN 8 IPSec Settings Guide For Reference/Example Only8.1.1 Settings for Router Enable Set the VPN settings as followsWhen finished, click “More” VPN Settings - Tunnel 1 - IKE Max. number of8.1.2 Settings for router Enable Set the VPN settings as followsWhen finished, click “More” VPN Settings - Tunnel 1 - IKE Max. number ofWhen finished, save your settings Set the Tunnel 1 IKE settings as followsTunnel Local Subnet8.1.3 Common Settings for both routers 8.2 Tunnel between a SMCBR14VPN and standalone client L2TP PPTP8.3 PPTP/ L2TP configuration example Page A. Verifying your connection to the router 9 TroubleshootingB. I am getting an IP Address that starts with C. My computer’s IP Address is incorrectH. IPSec VPN Configuration F. I am having problems establishing a PPPoE xDSL WAN connectionI. I have authentication problems with the L2TP or PPTP VPN Server G. Can I use this router with AOL DSL?L. Why can’t a PPTP client “see” the LAN clients on a SMCBR14VPN? J. I forgot my password and can no longer log into the routerK. Upgrading the firmware M. No IPSEC connect button?How many tunnels can be configured? What is the difference between SMCBR14VPN and SMCBR18VPN?Do I need two routers to establish a VPN connection? Can the SMCBR14VPN act as a PPTP client?Standards 10 Technical SpecificationsHardware / Ports LEDsOperating Temperature Input PowerDynamic IP L2TP PPTP BigPond Static IP 5V 2A11 Terminology Fixed IP - see Static IP Page Page