Topology. VPN settings in Vigor2950

Transcription

1 How to create IPSec tunnels by Windows XP built in VPN client? (not using DrayTek SmartVPN) Topology In this example, a PC with Windows XP system dials up an IPSEC VPN connection to Vigor router. The IP address of the PC is The IP address of Vigor s WAN is , the VPN subnet is /24. The network topology is shown below: VPN settings in Vigor2950 Please follow the steps below to set VPN Settings for Vigor device. 1. Add a VPN profile in the "VPN and Remote Access >>Remote Dial-in User page as shown below: - 1 -

2 2. Press the IKE Pre-Shared Key button, then in the pop-up window enter the pre-shared key When the VPN is connected, you may check the connection status from VPN and Remote Access >>connection management page: VPN settings in Windows XP In Windows XP, we need to configure the IP Security Policy. Please follow the steps listed below: 1. Execute mmc.exe to manage IP security policy

3 2. Add IP Security Policy Management by choosing Add/Remove Snap-in. 3. From the Standalone tab, please click Add

4 4. Choose IP Security Policy Management and click Add. 5. When the following screen appears, please choose Local computer and click Finish. 6. The IP Security Policy Management is added

5 7. Select Create IP Security Policy to create a policy for IPSEC-VPN. 8. When the IP Security Policy Wizard appears, please click Next

6 9. Type a suitable name in the name filed, such as ipsec. 10. Uncheck Activate the default response rule and Click Next

7 11. When the following window appears, please check Edit properties and click Finish. Add a rule for outgoing IPSec traffic Below we will create two rules for Vigor2950 manually. One is for outgoing traffic, and the other is for incoming traffic. 1. Open IPSec Properties window, there is a default rule <Dynamic>. Please click Add

8 2. From this page, please click Next. 3. Set the tunnel endpoint. Here enter remote VPN gateway s IP address: - 8 -

9 4. Select All network connections and click Next. 5. Select Use this string to protect. and type 123. Click Next

10 6. Then add an IP Filter list for this rule by clicking Add. 7. Type ipsec out as the name and click Add

11 8. When the following wizard appears, please click Next. 9. Choose A specific IP Address and click Next

12 10. In the following page, type the IP address and click Next. 11. Next, choose destination address with A specific IP Subnet. Click Next

13 12. Type IP address and Subnet mask. 13. Choose Any as the protocol type. Click Next

14 14. Click OK to finish the settings. 15. Select ipsec out in the IP Filter list, then click Next

15 16. Click Add to setup action for this rule. 17. The wizard will appear, then. Please click Next

16 18. Type ipsec out as the name and click Next. 19. Select Negotiate security and click Next

17 20. Select Encryption and Integrity and click Next Uncheck Edit properties and click Finish

18 22. Select ipsec out for Filter Action, and click Next. 23. Uncheck Edit properties and click Finish

19 Add the other rule for incoming traffic 1. Open IPSec Properties window and check ipsec out. Next, click Add. 2. When the following wizard appears, click Next

20 3. Set the tunnel endpoint. Here please type IP address of client s PC. Click Next. 4. Select All network connections. Click Next

21 5. Click Use this string to protect. and enter 123. Click Next. 6. Then click Add to add an IP Filter list for this rule

22 7. Type ipsec in as the name and click OK. 8. Choose A specific IP Subnet and click Next

23 9. Type IP address and Subnet mask, click Next. 10. Next, choose destination address with A specific IP Subnet. Click Next

24 11. In the following page, type the IP address and click Next. 12. Choose Any as the protocol type. Click Next

25 13. Uncheck Edit properties and click Finish. 14. Click OK to finish the settings

26 15. Select ipsec in from IP Filter list, then click Next. 16. Click Add to setup the action for this rule

27 17. When the following screen appears, click Next. 18. Type ipsec in as the name and click Next

28 19. Select Negotiate security and click Next. 20. Select Encryption and Integrity and click Next

29 21. Uncheck Edit properties and click Finish. 22. Select ipsec in for Filter Action, and click Next

30 23. Uncheck Edit properties and click Finish. Now we can see two rules for this IPSec policy. Select both of them and click Apply

31 Choose ipsec>>assign from the Console screen. At last, we can use the command ping from DOS prompt to initiate the VPN connection, then the IPSEC-VPN will be set up