|
a. Remote User Profile Setup ( Teleworker ) : [ for example : Vigor2910V ]
1. In Vigor's web configuration page, click VPN and Remote Access -> Remote Dial-in User.
2.
a. Select " Enable this account ".
b. Set the Idle Timeout as 0 to retain this tunnel till terminated by the remote site.
c. Enable the IPSec Tunnel.
d. Input the IKE pre-shared key
e. Specify Remote Node- Remote Client IP 172.17.1.10
3. When the user successfully dialed in, you may see the connection
status in VPN and Remote Access >> Connection Management.
b. Windows Vista Settings :
1. Open Control Panel, and select Administrator Tools.
2. Open Windows Firewall with Advanced Security.
3. Select IPSec Settings then click Customize.
4.Select Key exchange(Main Mode) as Advanced then click Customize.
5.Select Diffie-Hellman Group 1 as the Key exchange algorithm.
Note: Vigor Router don't accept Diffie-Hellman Group 2 algorithm but Vista uses Diffie-Hellman Group 2 algorithm by default. We have to change the setting before creating IPSec tunnel to Vigor Router.
6. Select Action- Create a new rule.
7. Select Tunnel as the type of connection security rule.
8. Define Endpoints for this VPN tunnel.
a. Endpoint 1 (Local). Add local IP 172.17.1.10 address in this field.
b. Define local and remote tunnel computer.
Local tunnel computer 172.17.1.10
Remote tunnel computer 202.211.200.241 (The WAN ip address of Vigor 2910)
c. Endpoint 2 (Remote). Add remote IP subnet 192.168.100.0/24 address in this field.
9. Define and input the preshared key as the authentication
method.
10. Select when does this rule apply.
11. Name this IPsec tunnel rule.
12. Now, in Windows Firewall with Advanced Security, you can
find this connection security rules. Please confirm if it
is enabled.
13. You can try to ping Vigor2910’s LAN ip address to verify
the connection. Ping result
|
|
|
Page last modified : 13 October 2008 |