D-Link DFL-1600 User Manual page 247

22.1. IPsec
2. IPsec Tunnel
Next step is to configure the IPsec tunnel.
Interfaces IPsec Tunnels
General
Enter the following:
Name: RoamingIPsecTunnel
Local Network: 10.0.1.0/24 (This is the local network that the roaming
users will connect to)
Remote Network: The firewall looks at this field and compares it to the
roaming user's source IP address in order to allow connections only from
the configured local net to remote net. However, in this scenario, clients
should be allowed to roam in from everywhere. Thus, this field is set to
all-nets (0.0.0.0/0). That means that virtually all existing IPv4-addresses
are allowed to connect.
Remote Endpoint: (None)
Encapsulation Mode: Tunnel
Algorithms
IKE Algorithms: Medium or High
IPsec Algorithms: Medium or High
Authentication
Pre-Shared Key: Select the pre-shared key created earlier, SecretKey in
this case.
Routing
Automatic Routing
The IPsec tunnel needs to be configured to dynamically add routes to the
remote network when the tunnel is established. This is done under the
Routing tab. Dynamically add route to the remote network when a
tunnel is established: Enable
Then click OK
3. Configure Rules
Finally we need to configure the rules to allow traffic inside the tun-
nel. See 14.3 IP Rules Configuration
Add
for details on how to configure rules.
D-Link Firewalls User's Guide
IPsec Tunnel:
227