IPsec VPN from Windows to Vigor Router by Smart VPN Client

This document introduces how to set up the router as an IPsec VPN server, set up Windows Smart VPN Client in IPsec mode, and how to start the IPsec connection.

Setup on Vigor Router

1. Go to VPN and Remote Access >> IPsec General Setup, enter Pre-shared Key and confirm it again, then click OK.

a screenshot of DrayOS IPsec General Setup

2. Go to VPN and Remote Access >> Remote Dial-in User, and click an available Index.

a screenshot of DrayOS Remote Dial-In VPN client list

3. Set up IPsec profile for the remote dial-in user:

  1. Enable this account
  2. Make sure IPsec Tunnel is enabled at Allowed Dial-in Type
  3. Click OK to save.
a screenshot of DrayOS Remote Dial-In VPN client setup

4. (Optional) Use Specify Remote Node to increase security by letting allow the connection from only the specified IP address and using a customized IKE Pre-Shared Key for this account (instead of general pre-shared key)

a screenshot of DrayOS Remote Dial-In VPN client setup

1. Navigate to VPN and Remote Access >> VPN Profiles, click Add to create a new Profile:

  1. Enable this profile
  2. Type Local IP and select Subnet Mask
  3. Type Remote Host IP. Use 0.0.0.0 when the remote VPN client is using Dynamic IP
  4. Type Pre-Shared Key if Remote Host IP is NOT 0.0.0.0 (the VPN client is NOT using Dynamic IP)
  5. Click Apply to save the VPN profile.
   

2. Go to VPN and Remote Access >> IPSec General Setup, type IPsec Pre-Shared key in and click Apply.

VPN Client Setup

1. Open Smart VPN Client on the VPN client, and click Profiles >> Add (Download the latest version here)

a screenshot of Windows Smart VPN Client profile list

2. Set up VPN profile as follows

  1. Enter Profile Name
  2. Select IPSec Tunnel for Type
  3. Enter VPN Server's IP (the router's WAN IP) at Server Information
  4. At IP Property, input VPN server's LAN subnet at Remote Subnet and Remote Subnet Mask
  5. Choose Pre-shared Key at Authentication Method and input the same Pre-shared key as step 1.
  6. Click OK to save
a screenshot of Windows Smart VPN Client profile setup

Active the IPsec connection

3. Select the profile we just created at Active Profile, and switch on Active.

a screenshot of Windows Smart VPN Client Connection Status

4. Click OK to start dialing.

a screenshot of Windows Smart VPN Client Connection Status

5. Due to IPSec's settings, we need to initiate the IPsec connection by generating some traffic to the VPN side. Pinging the router's LAN IP address is a simple way to do this.

a screenshot of command prompt windows running ping

Network Administrator may also check the online VPN clients by going to VPN and Remote Access >> Connection Management.

a screenshot of DrayOS VPN Connection Management

Published On: Jan 17, 2019

Was this helpful?     


Related Articles