Table of Contents
Advertisement
I s s u e 1 . 0 , A p r i l 2 0 0 6
AH transform
IPCOMP transform
tunnel type
• Target host: Destination of decrypted traffic
ip range?
ip 1(ip address / ip address 1)
ip 2(subnet mask / ip address 2) The subnet mask of the target host / The End
Note: IKE life duration (SA lifetime)/IKE Hash/IKE Encryption/IPSec Operation
(protocol)/ESP transform/ESP auth: When negotiating ABCD VPN IPSec to ABCD
VPN IPSec, it is not critical to match up these settings on both servers. The routers have
the ability to respond to and initiator's negotiation and handle it accordingly, without
detecting a mismatch in policy and rejecting the negotiation. If desired, you may enter the
settings shown in our example.
6. When you have finished the settings, scroll to the bottom of the page and click the Add
Endpoint button. A window will pop up indicating a successful save.
NOTE: You must configure the Main Office VPN Router (main@ABCD.com) as
we have configured the Branch Office VPN Router (remote@ABCD.com)
above. Once you have configured both sides of the connection, you can test
the tunnel using PING. To verify that your tunnel is working, ping the IP
address of a computer on the remote network. If you ping the main network, it
©2006 Charles Industries, Ltd.
All rights reserved. Printed in United States of America.
will only trigger phase 1 and 2 negotiations. You will only receive a reply if you
The availability of features and technical specifications herein subject to change without notice.
ping an actual IP address on the network, such as the router WAN IP address.
You can use Microsoft HyperTerminal to view phase 1 and 2 negotiations.
null.
The options include: md5, shal, des-mac,
null.
The options include: lzs, null.
The options include: public, private.
Public uses the ESP protocol only.
Private provides UDP encapsulation for
NAT traversal. We are using ports 2787
(ESP), 2788 (AH), and 2845 (IPCOMP).
Public should be used for initial testing.
The options include: Subnet, IP Range
The IP address of the target host / The Start IP
address of the target host IP range
IP address of the target host IP range
95
Section 364-180-N02
Advertisement
Table of Contents
