SonicWALL VPN Page 193
Group VPN Configuration for the SonicWALL and VPN ClientConfiguring Group VPN on the SonicWALL
Click VPN on the left side of the SonicWALL b r owser window, and then click Configure.
The SonicWALL VPN tab defaults to a Group VPN setting. This feature facilitates the set up and
deployment of multiple VPN clients by the administrator of the SonicWALL appliance. Security
settings can now be exported to the remote client and imported into the remote VPN client settings .
Group VPN allows for easy deployment of multiple VPN clients making it unnecessary to individually
configure remote VPN clie nts. Group VPN is only available for VPN clients and it is recommended to
use Authentication Service or XAUTH /RADIUS i n conjunc tion with t he Group VPN for added security.
To enable Group VPN, follow the in structions below:
1. Click VPN on the left side of the Management Station interface.
2. Click on Group VPN. The Security Association default setting is Group VPN.
3. Configure the Group VPN to use either IKE using Pre-shared Secrets or IKE using Certificates.
To use certific ates, an Authentication Service upgrade must be purchased.
4. Select Group 2 from the Phase 1 DH Group menu.
5. Enter the SA Life Time value in minutes. A value of 28800 se conds (8 hours) is recommended .
6. Select 3DES & SHA1 from the Phase 1 Encryption/Authentication menu.
7. Select Encrypt and Authenticate (ESP 3DES HMAC MD5) from the Phase 2 Encryption/
Authentication menu.