Table of Contents
Advertisement
•
IP Pool : 192.168.189.30-192.168.189.50
•
Netmask : 255.255.255.0
•
DNS : 192.168.28.4
4.
Click OK
B. Configure the IPsec tunnel:
1.
Go to: Network > Interfaces and VPN > IPsec > Add > IPsec Tunnel
2.
Now enter:
•
Name: my_ikev2_client_tunnel
•
Local Network: lannet
•
Remote Network: all-nets
•
Remote Endpoint: all-nets
•
IKE Config Mode Pool: Static
3.
Select IKE Settings and enter:
•
Set the IKE Version to IKEv2
4.
Select Authentication and enter:
•
Enable the X.509 Certificate option
•
For Gateway Certificate select my_host_cert
•
For Root Certificate(s) add my_root_cert
•
Enable the Require EAP for inbound IPsec tunnels option
•
Enable the Request EAP ID option
5.
Select Advanced and enter:
•
Enable the Add route dynamically option
•
Disable the Add route statically option
6.
Click OK
C. Configure a RADIUS server for authentication:
1.
Go to: Policies > User Authentication > RADIUS > Add > RADIUS Server
2.
Now enter:
•
Name: my_radius_server
•
IP Address: 203.0.113.20
•
Shared Secret: MYSHAREDRADIUSSECRETSTRING
718
Chapter 9: VPN
- Quick Links:
- User Manual
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
