Internet Over Ips Ec Tunnel; Configuring Vpn Clients - D-Link DWC-1000 User Manual

Wireless Controller
W it h a co n fig u red RA DIUS s erv er, t h e co nt roller co n nects t o a RA DIUS s erv er an d
p as s es t o it t h e credent ials t h at it receiv es fro m t h e VPN clien t . Yo u can s ecu re t h e
co n n ectio n b etween t h e co n t ro ller an d t h e RA DIUS s erv er wit h t h e au t h en t icat io n
p ro t o co l s u p p o rt ed b y t h e s erv er (PA P o r CHA P). Fo r RA DIUS – PA P, t h e
co n t ro ller firs t ch ecks in t h e u s er d at ab as e t o s ee if t h e u s er cred en t ials are
av ailab le; if t h ey are n o t , t h e co n t ro ller co n n ect s t o t h e RA DIUS s erv er.
8.2.2 Internet ov er IPSec tunnel
In t h is feat u re all t h e t raffic will p as s t h rou gh t h e VPN Tu n n el an d fro m t h e Rem o t e
Gat eway t h e p acket will b e ro u t ed t o In t ern et . On t h e remo t e g at eway s id e, t h e
o u t g o in g p acket will b e SNA T'ed .

8.3 Configuring VPN clients

Remo t e VPN clien t s mu s t b e co nfig u red wit h t h e s ame VPN p o licy p aramet ers used in
t h e VPN t u n n el t h at t h e clien t wis h es t o u se: en crypt io n, au thent icat ion , life t ime, an d
PFS key -g ro u p . Up o n es t ab lis h in g t h es e au t h en t icat io n p aramet ers , t h e VPN Clien t
u s er d at ab as e mu s t als o b e p o p u lat ed wit h an acco u n t t o g iv e a u s er acces s t o t h e
t u n n el.

VPN clien t s o ft ware is req u ired t o es t ab lis h a VPN t u n n el b et ween t h e
co n t ro ller an d remo t e en dpo int . Op en s o urce s oft ware (su ch as Op en VPN or
Op en s wan ) as well as M icro s o ft IPs ec VPN s o ft ware can b e co n fig u red
wit h t h e req u ired IKE p o licy p aramet ers t o es t ab lis h an IPs ec VPN t u n n e l.
Refer t o t h e clien t s o ftware g u ide fo r d et ailed in s tructio ns o n s et u p as well
as t h e co n t ro ller‟s o n lin e h elp .
Th e u s er d at abase co nt ain s t he lis t o f VPN u s er acco un ts t h at are au t h o rized t o u s e a
g iv en VPN t u n n el. A lt ern at iv ely VPN t u n n el u s ers can b e au t h en t icat ed u s in g a
co n fig u red Rad iu s d at ab ase. Refer t o t h e o nlin e h elp t o d et ermin e h o w t o p o pu late the
u s er d at ab as e an d / o r co n fig u re RA DIUS au t h en t icat io n .
233
User Manual