GajShield UPTM Certification Module 4. GajShield Infotech Pvt Ltd

Transcription

1

2 GajShield UPTM Certification Module 4 GajShield Infotech Pvt Ltd

3 Types Of VPN IPSec - IP Security PPTP - Point-to-Point Tunneling Protocol L2TP - Layer 2 Tunneling Protocol GRE - Generic Route Encapsulation

4 VPN In this training session you will learn -How to configure Site-to-Site VPN using Preshared Key. -How to configure Client-to-Site VPN using X509 Certificate. -VPN Configuration for L2TP/IPsec. -VPN Configuration for PPTP.

5 Client to Site VPN Site to Site VPN

6 Site-to-Site IPSec VPN Configuration Using Preshared Key

7 Example Setup We have to established Site-to-Site VPN. User From Parel Branch can access Web Server of Andheri Branch. User From Andheri Branch can access Mail and Database Server of Parel Branch. User User TATA MTNL Router Router LAN /24 TATA Internet Cloud MTNL LAN /24 VPN server switch User User VPN server Parel Branch Andheri Branch Web Server Mail Server Data Base Server

8 Steps to configure Site-to-Site VPN Using Preshared Key 1. Creation of Policy. 2. Creation of Tunnel. 3. Required to add rules. 4. Restart VPN

9 VPN Policy This section contain information about parameters required to define VPN Tunnels. Default Policy will come with factory setting. If you want you can create your own policy.

10 VPN Policy Settings Note-Policy configuration required to setup a ipsec tunnel.

11 VPN Tunnel Details This section contains information about configured Tunnels

12 VPN Tunnel Configuration Using Preshared Key Example configuration of Site-to-Site VPN using Preshared Key. If we know remote IP address Static IP of UPTM Gateway of UPTM Local Network Remote VPN Server IP Remote Local Lan

13

14

15 Rules for site-to-site VPN For VPN Connectivity For access of LAN

16 Restart VPN

17

18 Client-to-Site L2TP/IPsec VPN Configuration Using X509 Certificate

19 Client-to-Site VPN example User from remote location want to connect Mail Server Inside Andhri Branch. So that he/she can access there mail. Remote-User User TATA Router Remote User LAN /24 TATA Internet Cloud Remote-User User VPN server Andheri Branch Mail Server Data Base Server

20 Steps to Configure Client-to-Site L2TP/IPsec VPN Using x509 Certificate 1. Create CA Certificate. 2. Create local request file. 3. Sign local request file by Signing CA. 4. Create User request file. 5. Sign User request file by Signing CA. 6. Creation of policy. 7. Creation of tunnel. 8. Configure L2TP Options. 9. Add new user. 10. Required to add rules. 12. Restart L2TP. 13. Restart VPN Tunnel.

21 CA Certificate Details After expiry date certificate will not work. So take expiry date at least 10 years from date of creation. CA certificate Password Uniqe for each certificate Note: Don t use special character and space in any of the above field.

22 Signing CA Certificate

23 User Certificate Details User Certificate Password Uniqe for each certificate Note: Don t use special character and space in any of the above field.

24 User Request File and User Certificate Signed By CA User Certificate File User Request File Click here to sign by CA

25 User Request File Signed By Signing CA CA certificate password

26 VPN Policy This section contain information about parameters required to define VPN Tunnels. Default Policy will come with factory setting. If you want you can create your own policy.

27 VPN Policy Settings Note-Policy configuration required to setup a ipsec tunnel.

28 VPN Tunnel Details This section contains information about configured Tunnels

29 VPN Tunnel Configuration Using Certificate Example configuration of Client-to-Site VPN using X509 certificate. If we don t know remote IP address Remote Server IP is Any. User Certificate We need to create User Certificate from VPN->Certificate->Manage Certificate Option

30 Local Certificate Details Local IPsec key settings is required when we want to configure VPN using X509 certificate. Before configuring it we need to create CA certificate and User Certificate in VPN->Certificate Section.

31 Advance VPN Options No need to changed any thing until required.

32 L2TP Configuration Static IP of UPTM Reserve IP range Local IP of UPTM

33

34 VPN User Configuration You can assign any free IP from IP-range allocate for VPN users. Or you can left it blank, VPN server will assign IP to user automatically form IP pool define in L2TP or PPTP configuration.

35 VPN Users

36 Rules of L2TP/IPsec VPN Rules for VPN Rules to access machine inside local LAN

37 Restart L2TP

38 Restart VPN

39 PPTP Configuration

40 Client-to-Site VPN example User from remote location want to connect Mail Server Inside Andhri Branch. So that he/she can access there mail. Remote-User User TATA Router Remote User LAN /24 TATA Internet Cloud Remote-User User VPN server Andheri Branch Mail Server Data Base Server

41 Steps to configured PPTP VPN Configure PPTP options Add VPN User Create rule for VPN. Restart PPTP.

42 PPTP Configuration Reserver Local Lan Range Local Lan IP of UPTM

43

44 VPN User Configuration You can assign any free IP from IP-range allocate for VPN users. Or you can left it blank, VPN server will assign IP to user automatically form IP pool define in L2TP or PPTP configuration.

45 VPN Users

46 Rules for VPN Rules to access machine inside local LAN

47 Restart PPTP

48 How to save Certificate

49 Click here to save certificate

50 Export password User certificate password Export Password Required when we import certificate on windows machine.

51

52 Windows Machine Configuration for L2TP and PPTP VPN Client

53

54

55 Click on add button Click on Add button

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76 IP of VPN server

77

78

79

80 Click on settings button

81 If we are using preshared key click on IPSec Settings

82

83

84

85

86

87

88 Click on Connect Button Enter User name and password