D-Link DFL-900 User Manual page 137

DFL-900/1500 User Manual
Step 2. Add an IKE rule
Click the IKE hyperlink and click Add to add a
new IPSec VPN tunnel endpoint.
Step 3. Customize the rule
Check the Active checkbox. Enter a name for
this rule like IKErule. Enter the Local IP
(192.168.88.0/255.255.255.0)
Address
and the
Remote
(192.168.40.0/255.255.255.0). Be sure to
select Aggressive mode to match the DFL-1
settings. Select the Outgoing interface of
this VPN/Firewall Router. Enter the public IP of
the opposite-side VPN gateway (61.2.1.1) in
the Peer's IP Address. Click the ESP
and select
Algorithm
Authenticate (DES,
Key as 1234567890. Select
Pre-Shared
FQDN(domain name) and enter dlink.com in
My Identifier field. Click the Apply button to store
the settings. Note, in the Action region, you
should choose either ESP Algorithm or AH
Algorithm, or system will show error message.
Note that one of the Peer's IP Addresses is
Static IP, and the other must be the Dynamic
IP while using Dynamic IPSec VPN type to
establish the VPN tunnel.
Step 4. Remind to add a Firewall rule
After finishing IPSec rule settings, we need to add
a firewall rule. Here system shows a window
message to remind you of adding a firewall rule.
Just press the OK button to add a firewall rule.
ADVANCED SETTINGS > VPN Settings > IPSec > IKE
ADVANCED SETTINGS > VPN Settings > IPSec > IKE > Add
IP Address
Self local IP
Encrypt and
Enter the
MD5).
The opposite
side IP Address
ADVANCED SETTINGS > VPN Settings > IPSec > IKE > Add
Virtual Private Network –Dynamic IPSec
Address
129
Chapter 14