|
Example 2: Creating multiple IPSec connections
Refer to the following scenario.
VPN Client: Windows XP running Smart VPN Client version 3.2.5.
VPN Gateway: Vigor 2800.
Note: The Smart VPN Client supports NAT-T since version 3.2.5.
So you should uninstall the old version and install the latest
version. You may download it from http://www.draytek.com/support/download.php
Creating
a profile on Vigor 2800 for the VPN clients.
1. Go to VPN and Remote Access >> Remote Dial-in User and click the Index x to enter one profile setup page.
2. Click Enable this account.
Set the Idle Timeout. 0 means no timeout
setting and the connection won't be dropped even if there
is no traffic.
Make sure IPSec is enabled.
Enable Specify Remote Node and enter 218.242.130.18.
Then press the IKE Pre-shared Key button and enter the key in the popped-up window.
3. When the VPN client is connected, you may check the status in the VPN and Remote Access >> Connection Management page.
Configuring
the Smart VPN Client version 3.2.5
1. Open the Smart VPN Client. Make sure the Configure
button is grayed.
2. Create a new profile by pressing the Insert button.
Create a name for this profile.
Enter the VPN server's IP address
or DDNS.
Select IPSec as the Type of VPN.
Press the OK button.
3. In the popped-up window enter the following settings.
If your PC has multiple NICs and multiple IP addresses, select the IP address that you use to connect to the VPN server as My IP.
Select Standard IPSec Tunnel.
Enter remote network's subnet and mask.
In the Security Method field you MUST select High(ESP). DO NOT select Medium(AH).
Enter the Pre-shared Key, which
should be the same as that set in the Vigor's VPN profile.
Press the OK button.
4. Press the Active button to apply the IPSec policy in the Windows system.
When the Status in left below show Connected, open the
Command Line Prompt and use ping to trigger the IPSec
connection.
Go to NAT-T Application.
|
|
|
|
Page last modified : 13 October 2008 |