How to access peers with different VPN through IPSec. Tunnel

Transcription

1 How to access peers with different VPN through IPSec Tunnel Scenario: Taipei branch and Kaohsiung branch dial to Hsinchu headquarter via IPSec VPN Tunnel respectively. Both Taipei branch and Kaohsiung branch can access and get all of the information in LAN from Hsinchu headquarter. The purpose is that we want all the branches can make fully data exchange in LAN. Taipei branch and Kaohsiung branch can obtain the information from each other normally. Therefore, the settings can be configured as follows: 1

2 A. VPN Dial-in Configuration in Hsinchu headquarter (Take VigorPro 5300 as an example) Create a Dial-in VPN tunnel for Taipei Branch Open VPN and Remote Access >> LAN to LAN from the VigorPro 5300 WEB interface. Click Index number 1 link to access into the following page: 1. Type the name of the profile and check Enable this profile to activate the settings for Taipei branch. 2. Choose WAN1 First as dial-in tunnel for VPN connection. 3. Choose Dial-In for call direction. 4. Set Idle Timeout as 0 ( 0: means on line forever). 5. Type remote network LAN IP address and remote network mask of Taipei branch. 2

3 Create a Dial-in VPN tunnel for Kaohsiung Branch Open VPN and Remote Access >> LAN to LAN from the VigorPro 5300 WEB interface. Click Index number 1 link to access into the following page: 1. Type the name of the profile and check Enable this profile to activate the settings for Kaohsiung branch. 2. Choose WAN1 First as dial-in tunnel for VPN connection. 3. Choose Dial-In for call direction. 4. Set Idle Timeout as 0 ( 0: means on line forever). 3

4 5. Type remote network LAN IP address and remote network mask of Kaohsiung branch. Create a Dial-in IPSec Pre-Share Key for Hsinchu Headquarter Open VPN and Remote Access >> IPSec General Setup from the VigorPro 5300 WEB interface. 1. Create the default IPSec Pre-Shared key and type the key again for confirmation. 2. Click OK to finish the configuration. 4

5 B. VPN Dial-out Configuration in Taipei Branch (Take Vigor2820 as an example) Open VPN and Remote Access >> LAN to LAN from the Vigor2820 WEB interface. Click Index number 1 link to access into the following page: 1. Type the name of the profile and check Enable this profile to activate the settings for Taipei branch. 2. Choose WAN1 First as dial-in tunnel for VPN connection. 3. Choose IPSec Tunnel. 4. Type the WAN IP address of Hsinchu Headquarter. 5

6 5. Choose Dial-Out for call direction. 6. Check Always on. 7. Type IKE Pre-share Key (the value must be the same with settings configured in Hsinchu Headquarter.) 8. Choose IPSec Security Method and encryption way for data/information.(taipei branch and Hsinchu headquarter must set with the same value. In this case, DES with Authentication is selected.) 9. Type remote network LAN IP address and remote network mask of Hsinchu headquarter. Click More. 10. Type the network LAN IP and netmask for Kaoshiung branch, and click Add. 11. After clicking Add, the new added list will be shown on the right box of Remote Network. C. VPN Dial-out Configuration in Kaohsiung Branch (Take Vigor2910 as an example) Open VPN and Remote Access >> LAN to LAN from the VigorPro 5300 WEB interface. Click Index number 1 link to access into the following page: 6

7 1. Type the name of the profile and check Enable this profile to activate the settings for Kaohsiung branch. Choose WAN1 First as dial-in tunnel for VPN connection. 2. Choose IPSec Tunnel. 3. Type the WAN IP address of Hsinchu Headquarter. 4. Choose Dial-Out. 5. Check Always on. 6. Type IKE Pre-share Key (the value must be the same with settings configured in Hsinchu Headquarter.) 7. Choose IPSec Security Method and encryption way for data/information.(kaohsiung branch and Hsinchu headquarter must set with the same value. In this case, DES with Authentication is selected.) 7

8 8. Type remote network LAN IP address and remote network mask of Hsinchu headquarter. 9. Click More. 10. Type the network LAN IP and netmask for Taipei branch, and click Add. 11. After clicking Add, the new added list will be shown on the right box of Remote Network D. Connection Status Access into the router web pages from Taipei Branch and Kaohsiung Branch. Dial out to Hsinchu Headquarter through the routers respectively to observe the VPN connection status. (Observe the connection status between Taipei Branch and Hsinchu Headquarter through Vigor2820 installed in Taipei Branch) 8

9 (Observe the connection status between Kaohsiung Branch and Hsinchu Headquarter through Vigor2910 installed in Kaohsiung Branch) (Observe the VPN connection status through VigorPro5300 installed in Hsinchu Headquarter) 9

10 After creating IPSec VPN connection, Taipei Branch and Kaohsiung Branch can trace the route for each other and Hsinchu Headquarter. There is no trouble in route. (Trace the route to Hsinchu Headquarter from Taipei Branch) (Trace the route to Kaoshiung Branch and Hsinchu Headquarter from Taipei Branch) (Trace the route to Hsinchu Headquarter from Kaohsiung Branch) (Trace the route to Taipei Branch and Hsinchu Headquarter from Kaoshiung Branch) 10