Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 Table of Content Introduction................................3 Installation ................................3 Software installation ............................3 Evaluation Period............................4 Software manipulation ............................4 System Tray..............................4 Hidden User interface............................5 Main window ..............................5 3.3.1 Main menus ...............................6 3.3.2 Status bar ..............................6 3.3.3 Window 'About'............................6 Configuration................................7 USB Mode..............................7...
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 1 Introduction TheGreenBow VPN client is a complete IPSec VPN solution for all Windows versions. It provides full IKE support (preshared keying and X509 certificates) and NatTraversal. It is compatible with most of the currently available IPSec gateways and also operates as a peer-to-peer VPN in a "...
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 Caution: On Windows NT, 2000 and XP, you must have administrator rights. If it is not the case, the installation stops after the language choice with an error message. The license number is a string with hexadecimal characters as "0123456789ABCDEF0123". An error message warns user if this value is false.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 Color code is the following Blue icon: no VPN tunnel is established Red icon: at least one VPN tunnel is established Tooltips over VPN Client icon shows the connection status of the VPN tunnel: "Tunnel tunnelname"...
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 3.3.1 Main menus “File” menu is used for saving and loading a configuration. With this menu, you can import or export VPN configuration. 'Configuration' menu contains all actions from tree control right-click menu 'Configuration' menu gives also access to the configuration wizard.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 4 Configuration You’ ll find a set of useful VPN Client configuration documents available for each of the VPN Client gateway we support. Please go to our knowledge base on our website: http://www.thegreenbow.com/vpn_gateway.html 4.1 USB Mode The VPN Client 2.5 brings the capability to secure tunnel security elements by the use of a USB Stick.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 Note: At this stage, if an USB stick containing a VPN configuration with tunnel security elements is already plugged in, the associated drive will be automatically recognized. Please note also that this is not necessary to insert a USB Stick during this step.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 4.2 Configuration Wizard TheGreenBow IPSec VPN client integrates a Configuration Wizard that allows the creation of VPN configuration in three easy steps. This wizard is designed for remote computers that need to get connected to a corporate LAN through a VPN gateway.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 the public (network side) address of the gateway the preshared key you will use for this tunnel (this preshared key must be the same in the gateway) the IP address of your company LAN (e.g. specify 192.168.1.0) 4.2.3 Step 3 of 3 The third step summaries your configuration.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 6. Click on “Open Tunnel” for establishing the IPSec VPN tunnel (only in “IPSec Configuration” window) 4.3.2 Several Authentication or IPSec Configuration Phases Several Authentication Phases can be configured. Therefore, one computer can establish IPSec VPN connections with several gateways or other computers (peer to peer).
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 4.4.1 Settings description Name Label for Authentication phase used only the configuration user interface. This value is never used during IKE negotiation. It is possible to change this name at any time and read it in the tree control. Two Phase 1 can not have the same name.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 a string (type = KEY ID), e.g. 123456 a certificate issuer (type=DER ASN1 DN) (see Certificates configuration) If this identity is not set, VPN client's IP address is used. Remote ID Remote ID is the identity the VPN client is expecting to receive during Phase 1 from the VPN gateway.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 4.5.1 Settings description Name Label for IPSec Configuration only used by the VPN client. This parameter is never transmitted during IPSec Negotiation. It is possible to change this name at any time and read it in the tree list window. Two Phases can not have the same name.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 In order to use X509 Certificates with TheGreenBow IPSec VPN client, you must have the following items: Root certificate User certificate Private key of the user certificate The private key must not be encrypted. X509 certificates are used during Phase 1. 4.6.1 How configuring IPSec VPN Client with certificates? 1.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 4.7 Global Parameters 4.7.1 Settings description IKE default lifetime Default lifetime for IKE rekeying. IKE minimal lifetime Minimal lifetime for IKE rekeying. IKE maximal lifetime Maximal lifetime for IKE rekeying. IPSec minimal lifetime Default lifetime for IPSec rekeying.
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 5 Configuration management 5.1 How to Import or Export an IPSec VPN configuration TheGreenBow VPN Client can import or export a VPN Configuration. With this feature, IT managers can prepare a configuration and deliver it to other users. Importing a configuration, select "File >...
Doc.Ref TgbVpn25x_en Doc.version 1.2 – Nov.2004 VPN version 2.50 5.3.1 Stopping IPSec VPN Client: option "/stop" TheGreenBow VPN Client can be stopped at any time by the command line: " [path]\vpnconf.exe /stop " where [path] is the client installation directory. If there is several active tunnels, they will close properly.
Need help?
Do you have a question about the THEGREENBOW VPN-CLIENT and is the answer not in the manual?
Questions and answers