VPN Configuration

Microsoft VPN

Note that different vendors use different terms. Generally, the terms "VPN Policy", "IPSec Policy", and "IPSec Proposal" have the same meaning. However, some vendors separate IKE Policies (Phase 1 parameters) from IPSec Policies (Phase 2 parameters).

For the Broadband VPN Gateway; each VPN policy contains both Phase 1 and Phase 2 parameters (if IKE is used). Each policy defines:

•The address of the remote VPN endpoint

•The traffic which is allowed to use the VPN connection.

•The parameters (settings) for the IPsec SA (Security Association)

•If IKE is used, the parameters (settings) for the IKE SA (Security Association)

Generally, you will need at least one (1) VPN Policy for each remote site for which you wish to establish VPN connections.

It is possible, and sometimes necessary, to have multiple Policies for the same remote site. However, you should only Enable one (1) policy at a time. If multiple policies for the same remote site are enabled, the policies are examined in the order in which they are listed, and the first matching policy will be used. While it is possible to change the order of the policies, it may not be easy to get the desired action from multiple policies.

VPN Configuration

The general rule is that each endpoint must have matching Policies, as follows:

VPN Endpoint

Each VPN endpoint must be configured to initiate or accept connec-

address

tions to the remote VPN client or Gateway.

 

Usually, this requires having a fixed Internet IP address. However, it is

 

possible for a VPN Gateway to accept incoming connections from a

 

remote client where the client's IP address is not known in advance.

Traffic Selector

This determines which outgoing traffic will cause a VPN connection

 

to be established, and which incoming traffic will be accepted. Each

 

endpoint must be configured to pass and accept the desired traffic

 

from the remote endpoint.

If connecting 2 LANs, this requires that:

•Each endpoint must be aware of the IP addresses used on the other endpoint.

•The 2 LANs MUST use different IP address ranges.

IKE parameters If using IKE (recommended), the IKE parameters must match (except for the SA lifetime, which can be different).

IPsec parameters The IPsec parameters at each endpoint must match.

71

Page 74 Page 76
Page 75
Image 75
TRENDnet TW100-BRV324 manual VPN Configuration, VPN Endpoint, address, Traffic Selector
Page 74 Page 76

TW100-BRV324 specifications

The TRENDnet TW100-BRV324 is a versatile broadband router designed to provide small to medium-sized businesses with reliable networking capabilities. One of its key features is its built-in firewall security, which ensures robust protection against unauthorized access and threats from the internet. This appliance uses Stateful Packet Inspection (SPI), providing a comprehensive barrier against a variety of cyber threats.

Equipped with a DHCP server, the TW100-BRV324 simplifies IP address assignment, allowing administrators to manage network resources efficiently. The device supports both DHCP and static IP configurations, making it flexible for various network setups. Additionally, it offers VPN pass-through capabilities, allowing secure remote access for users needing to connect to the corporate network from outside.

The TW100-BRV324 is noted for its impressive NAT (Network Address Translation) capabilities, which enable multiple devices on a local network to access the internet through a single public IP address. This feature is particularly beneficial in saving costs related to IP addresses while enhancing network management. Furthermore, it boasts an integrated 4-port switch, facilitating wired connections for several devices in a local area network (LAN).

In terms of connectivity, the router supports 10/100 Mbps Ethernet, providing sufficient bandwidth for most small business applications. The device is also easy to set up, thanks to its user-friendly web-based interface, which guides users through the configuration process. This simplicity makes it suitable for individuals with varying levels of networking expertise.

The TW100-BRV324 supports multiple connection types, including DSL and cable internet, ensuring compatibility with various ISPs. Additionally, it embeds Quality of Service (QoS) features, allowing network administrators to prioritize traffic. This is crucial for ensuring that bandwidth-intensive applications, such as video conferencing and VoIP, receive the necessary resources for optimal performance.

In summary, the TRENDnet TW100-BRV324 is a robust and feature-rich router well-suited for small to medium-sized businesses. With its combination of security features, flexible configurations, and user-friendly management tools, it offers a powerful solution for those seeking reliable network performance without the need for extensive technical knowledge.
Top Page Image Contents