Multitech RouteFinder RF560VPN User Manual page 33

VPN Setting Name
Enable NetBIOS
Broadcast
Remote Site
Remote IP Network
Remote IP Netmask
Remote Gateway
IP/FQDN
Network Interface
Secure Association
Enter the Required Information for Main Mode, the Secure Association Default:
Perfect Forward
Secure
Encryption Protocol
PreShared Key
Key Life
IKE Life Time
Save the VPN Settings
Click the Save button. Your defined connections are displayed at the bottom of this screen where you
can edit or delete them.
Multi-Tech Systems, Inc. RF560VPN User Guide
Chapter 5 – Configuring the RouteFinder Using a Web Browser
Description
When enabled, will allow Microsoft File and Printer sharing to
communicate information about computers on the network.
Choose whether the remote site will be used by a single user
or a LAN.
Enter Remote IP Network address (LAN) for Site B.
Enter Remote IP Netmask address for Site B.
Enter Remote Gateway IP address (WAN) for Site B.
Select a Network Interface from the drop-down list box. Other
options are Auto and Async.
Main Mode and Aggressive are part of the Internet Key
Exchange (IKE), a protocol for performing automated key
management for IPSec. Aggressive is similar but includes a
Key Group.
About IKE: The RF560VPN can be used with a wide range
of other IKE compliant VPN devices. IKE creates two types of
Security Associations to allow for encrypted traffic.
Once configuration is completed on the firewall to create a
VPN connection, the IKE process automatically negotiates
with the remote VPN device to establish the parameters for
individual Security Associations.
Main Mode provides for increased security during Phase-1
by encrypting the initial IKE traffic at the expense
performance. Aggressive Mode is used in cases where the
initial traffic cannot be encrypted, as is the case for dynamic
IP VPN clients or when performance is an important factor.
Manual Mode is used when the remote VPN device does not
support the IKE standard for key management. Manual Mode
requires more administration effort while providing for lower
overall VPN security, since the same keys are used until the
administrator manually changes them.
Main Mode: Select Main Mode (the default) to set how
inbound packets will be filtered. Main Mode primarily
encompasses router key exchange and the negotiation of
security policy. Selecting Main Mode activates the remaining
input settings on this screen.
Check the Enabled button.
Select 3DES.
Enter the PreShared Key name. You can enter an
alphanumeric name, but it must match the security code
for the RouteFinder at site B.
Enter the amount of time that tells the router to
renegotiate the Key
Enter the amount of time that tells the router to
renegotiate the IKE security association.
Example
Enabled
192.168.10.0
255.255.255.0
204.26.122.3
WAN
ETHERNET
Main Mode
Enable
3DES
102t3t4f
28800 sec
= 8 hours
3600 sec
= 60 min
33