Table of Contents
Advertisement
Remote IP addresses
Type
3. Click Next to continue. The screen you will see depends on whether you previously selected "Manual Key Ex-
change" or "IKE".
Manual Key Exchange
These settings must match the remote VPN. Note that you cannot use both AH and ESP.
Manually assigned Keys
AH Authentication
Single address - enter an IP address in the "Start IP
address" field.
Range address - enter the starting IP address in the "Start
IP address" field, and the finish IP address in the "Finish IP
address" field.
Subnet address - enter the desired IP address in the
"Start IP address" field, and the network mask in the "Sub-
net Mask" field.
The remote VPN should have these IP addresses entered as
it's "Local" addresses.
Figure 48: VPN Wizard - Manual Key Exchange Screen
AH (Authentication Header) specifies the authentication
protocol for the VPN header, if used. (AH is often NOT used)
If AH is not enabled, the following settings can be ignored.
Keys
The "in" key here must match the "out" key on the remote
VPN, and the "out" key here must match the "in" key on
the remote VPN.
Keys can be in ASCII or Hex (0..9 A..F)
For MD5, the keys should be 32 hex/16 ASCII characters.
For SHA-1, the keys should be 40 hex/20 ASCII charac-
ters.
SPI
71
Microsoft VPN
Advertisement
Table of Contents
