How To Establish IPSec VPN connection between Cyberoam and Mikrotik router

Transcription

1 How To Establish IPSec VPN connection between Cyberoam and Mikrotik router Applicable Version: onwards Scenario Establish IPSec VPN connection between Cyberoam and Mikrotik router using Preshared Key authentication. Microtik Configuration Administrator access required to add or modify configuration in Mikrotik. Step 1: Configure IPSec Proposal Go to IP > IPSec > Proposal and click Add New to create an IPSec proposal for the VPN tunnel as shown below. Parameters Enabled Name Auth. Algorithms Encr. Algorithms Value proposal1 sha1 3des Lifetime 00:30:00 PFS Group modp1024

2 Click Apply and then OK to create the IPSec Proposal. Step 2: Configure Peer Navigate to IP > IPSec > Peer and click Add New to configure Peer/ Remote Device (here, Cyberoam) as shown in the image.

3 Parameters Enabled Value Address Port Auth. Method sha1 pre shared key

4 Secret Policy Group Exchange Mode Send Initial Contact Proposal Check Hash Algorithm Encryption Algorithm DH Group Generate Policy cyberoam default main Obey sha1 3des modp1024 no Lifetime 04:00:00 DPD Interval disable DPD DPD Maximum Failures 5 Step 3: Configure IPSec Policy Navigate to IP > IPSec > Policy and click Add New to create IPSec policy as shown in the table below. Parameters Enabled Value Src. Address /24 Dst. Address /24 Protocol Action Level IPSec protocols Tunnel 255(All) encrypt require esp SA Src. Address SA Dst. Address Proposal proposal1 Priority 0

5 Step 4: Configure NAT policy Navigate to Firewall > NAT and click Add New to create NAT policy. Specify the following parameters: Parameters Source Address Destination Address Action Value (Mikrotik s LAN IP Address) /24 (Cyberoam s LAN IP Address) Accept Click Apply and OK to save. The following screen will be displayed.

6 Cyberoam Configuration You must be logged on to the Web Admin Console as an administrator with Read-Write permission for relevant feature(s). To configure IPSec Connection in Cyberoam, follow the steps given below. Step 1: Configure IPSec Connection Go to VPN > IPSec > Connection and click Add to create a new connection using parameters given below. Parameter Value Description Name IPSec_CR_Mikrotik Name to identify the IPSec Connection Connection Type Site to Site Select Type of connection. Available Options: Remote Access Site to Site Host to Host Policy DefaultBranchOffice Select policy to be used for connection Select the action for the connection. Action on VPN Restart Authentication details Initiate Authentication Type Preshared Key Available options: Respond Only Initiate Disable Select Authentication Type. Authentication of user depends on the connection type. Preshared Key Cyberoam Specify the Preshared Key Endpoints Details Local PortB Select local port which acts as end-point to the tunnel

7 Remote Specify Gateway IP Address assigned to Cradle Point router. Local Network Details Local Subnet /24 Select Local LAN Address. Add and Remove LAN Address using Add Button and Remove Button Remote Network Details Remote LAN Network /24 Select/specify IP address of Cradle Point local network. Click OK to create the connection.

8 Step 3: Activate IPSec Connection Go to VPN > IPSec > Connection and click under Active and Connection heads against IPSec_CR_Mikrotik connection, created in Step 1 Under the Active status indicates that the connection is successfully activated. Under the Connection status indicates that the connection is successfully established. Document Version November, 2014