AirLive WL-8000VPN User manual

OvisLink 8000VPN VPN Guide
WL/IP-8000VPN
V
V
VP
P
PN
N
N
S
S
Se
e
et
t
tu
u
up
p
p
G
G
Gu
u
ui
i
id
d
de
e
e
Version 0.6

OvisLink 8000VPN VPN Guide
Document Revision
Version Date Note
0.1 11/10/2005 First version with four VPN examples
0.2 11/15/2005
1. Added example 5: dynamic VPN using TheGreenBow
VPN client
2. Corrected the illustration using 8000VPN icons
3. Added How To Use This Guide section
0.3 11/15/2005 Updated the cover page
0.4 11/17/2005 Minor correction for PPTP and L2TP LAN numbers
0.5 11/17/2005 Change PPTP and L2TP authentication method to CHAP
0.6 11/18/2005 Improved VPN router setup for Windows XP IPSec
i

OvisLink 8000VPN VPN Guide
T
Ta ab bl le e
o
of f
C
Co on nt te en nt t
Document Revision.................................................................................................i
WHAT IS THIS GUIDE .................................................................................................- 1 -
HOW TO USE THIS DOCUMENT..................................................................................- 1 -
VPN EXAMPLES.........................................................................................................- 2 -
EXAMPLE 1: USING IPSEC TO CONNECT 2LAN TOGETHER.......................- 4 -
USA Router Setup ............................................................................- 5 -
Germany Router Setup .....................................................................- 7 -
EXAMPLE 2: USING PPTPTO CONNECT REMOTE PC TO LOCAL LAN......- 10 -
Router Setup ................................................................................... - 11 -
Remote PC Setup (Using Windows XP VPN Client).....................- 13 -
EXAMPLE 3: IPSEC CONFIGURATION EXAMPLE .......................................- 19 -
Router’s IPSec Setup ......................................................................- 20 -
PC’s IPSec Setup (Windows XP) ...................................................- 24 -
EXAMPLE 4: USING L2TPTO CONNECT REMOTE PC TO LOCAL LAN......- 42 -
Router Setup ...................................................................................- 43 -
Remote PC Setup (Using Windows XP VPN Client).....................- 45 -
EXAMPLE 5: DYNAMIC VPNAPPLICATION EXAMPLE..............................- 51 -
Router’s Dynamic VPN with IPSec Setup .....................................- 52 -
Set up TheGreenBow VPN client...................................................- 56 -
ii

OvisLink 8000VPN VPN Guide
VPN EXAMPLES
In this Guide, we will provide setup guide for 5 VPN application examples:
1
1. .
Using IPSec protocol to connect 2 remote LAN
together using 2 WL/IP-8000 VPN Routers.
2
2. .
Using PPTP protocol to connect 1 remote PC with
WL/IP-8000 VPN
3
3. .
Setting up IPSec protocol to connect a remote mobile
PC with WL/IP-8000 VPN
4
4. .
Using L2TP protocol to connect 1 remote PC with
WL/IP-8000 VPN
5
5. .
Setting up Dynamic VPN where WL/IP-8000 VPN will
accept any PC worldwide from anywhere without
sacrifice security
To setup a VPN connection, it involves setting up both in the router and the
PC sides. As you will notice, the setup for the VPN server on the router is very
simple. But the setup on the client side depends on what type of VPN client
software you use on the PC. Once you take time to go through the
step-by-step example, it will become more clear and easier to setup.
- 2 -

OvisLink 8000VPN VPN Guide
WHAT IS THIS GUIDE
The traditional VPN needs trained personnel with professional knowledge to
set up. This WL/IP-8000 VPN example guide provides a step-by-step easy
setup for the VPN configuration.
HOW TO USE THIS DOCUMENT
There are many options to set up secure VPN environment. Various
combinations may serve for different purposes. Each example provides a
way to use WL/IP-8000 VPN configuration. If you need to
zConfigure the manual key IPSec VPN, please use
example 1
zConfigure the automatic key IPSec VPN, please use
example 3
zConfigure PPTP VPN, please use example 2
zConfigure L2TP VPN, please use example 4
zConfigure Dynamic VPN, please use example 5
zConnect 2 LAN together with secured VPN, please use
example 1
zConfigure central site for VPN, please use example 2
to 5
zConfigure client site VPN using
Windows XP IPSec client, please use example 3
Windows XP PPTP VPN, please use example 2
Windows XP L2TP VPN, please use example 4
TheGreenBow IPSec VPN client, please use
example 5
- 1 -

OvisLink 8000VPN VPN Guide
- 3 -

OvisLink 8000VPN VPN Guide
EXAMPLE 1: USING IPSEC TO CONNECT 2LAN TOGETHER
Router WAN IP:
192.168.254.1 Router LAN IP: 192.168.2.254
Router LAN IP:
192.168.1.254 Router WAN IP: 192.168.254.2
PC1 IP:
192.168.1.138 PC2 IP: 192.168.2.174
USA Office German Office
In this example, we will connect the USA office and German office
together using IPSec VPN server (WL/IP-8000VPN on both sides). The
goal is to let both offices’ network together and operate as if they are on
the same LAN. PC1 can link to PC2 freely. Please note that for security
purpose, IPSec require that the IP subnet on both side of the VPN tunnel
must be different. Therefore, in this example, the USA office’s local IP
subnet is 192.168.1.x. The German office’s local IP subnet is
192.168.2.x.
- 4 -

OvisLink 8000VPN VPN Guide
USA Router Setup
1. After login to WL/IP-8000VPN, click on VPN button on top of the page.
2
3
4
5 6 8
7
2. Check VPN Enable
3. Check NetBIOS Broadcast Enable
4. Enter Max. number of tunnels as 1.
5. In tunnel ID 1, enter the Tunnel Name as German.
6. In tunnel ID 1, enter the Method as Manual.
7. Click on Save button at the bottom of the page. (no need to reboot now)
8. After step 7, it should jump to the next screen automatically. If not, click
on More button at the end of tunnel ID 1.
9. The Tunnel Name is automatically from the last screen.
10.For the local secure group, to let the entire US office users access this
VPN tunnel, enter the local subnet 192.168.1.0 and subnet mask
255.255.255.0.
11.For the remote secure group, to let the entire German office users access
this VPN tunnel, enter the remote subnet 192.168.2.0 and subnet mask
255.255.255.0.
12.Enter the IP address of the German’s WAN port. In this case, it is
- 5 -

OvisLink 8000VPN VPN Guide
192.168.254.2.
13.Enter local and remote SPI. The local SPI we set is 12345 and remote
SPI 67890.
14.Encryption Protocol is ESP.
15.Encryption Algorithm is 3DES.
16.Encryption Keys are “1234567890123456”, “2222222222222222”,
and “3333333333333333” (16 Arabic numerals per key).
17.Set the key Life Time to 3000 and the Life Time Unit to Second.
18.Click on Save button at the bottom of the page.
19.To make effect all these configuration setups, we are rebooting the router.
Click on the Reboot button at the bottom of the page. When a dialog
pop-up says “Reboot right now”, click OK to reboot the router.
19
18 17
14, 15
13
10, 11, 12
16
- 6 -

OvisLink 8000VPN VPN Guide
Germany Router Setup
1. After login to WL/IP-8000VPN, click on VPN button on top of the page.
2
3
4
5 6 8
7
2. Check VPN Enable
3. Check NetBIOS Broadcast Enable
4. Enter Max. number of tunnels as 1.
5. In tunnel ID 1, enter the Tunnel Name as USA.
6. In tunnel ID 1, enter the Method as Manual.
7. Click on Save button at the bottom of the page. (no need to reboot now)
8. After step 7, it should jump to the next screen automatically. If not, click
on More button at the end of tunnel ID 1.
9. The Tunnel Name is automatically from the last screen.
10.For the local secure group, to let the entire US office users access this
VPN tunnel, enter the local subnet 192.168.2.0 and subnet mask
255.255.255.0.
11.For the remote secure group, to let the entire German office users access
this VPN tunnel, enter the remote subnet 192.168.1.0 and subnet mask
255.255.255.0.
12.Enter the IP address of the German’s WAN port. In this case, it is
- 7 -

OvisLink 8000VPN VPN Guide
192.168.254.1.
13.Enter local and remote SPI. The local SPI we set is 67890 and remote
SPI 12345.
14.Encryption Protocol is ESP.
15.Encryption Algorithm is 3DES.
16.Encryption Keys are “1234567890123456”, “2222222222222222”,
and “3333333333333333” (16 Arabic numerals per key).
17.Set the key Life Time to 3000 and the Life Time Unit to Second.
18.Click on Save button at the bottom of the page.
19.To make effect all these configuration setups, we are rebooting the router.
Click on the Reboot button at the bottom of the page. When a dialog
pop-up says “Reboot right now”, click OK to reboot the router.
19
17
14, 15
13
10, 11, 12
16
1
18
After the settings are done on both sides, the routers should build a tunnel
- 8 -

OvisLink 8000VPN VPN Guide
to connect the 2 sides together.
- 9 -

OvisLink 8000VPN VPN Guide
EXAMPLE 2: USING PPTP TO CONNECT REMOTE PC TO LOCAL LAN
Router WAN IP:
192.168.0.3
Router LAN IP:
192.168.1.254 PC WAN IP:
192.168.1.2
PC WAN IP:
192.168.0.1
In this example, we will demonstrate how to setup a VPN connection
between a remote PC and the WL/IP-8000VPN using the PPTP server
function. Looking at the diagram above, the Remote PC has real IP
address of 192.168.0.1. If this remote PC is connected to Internet
through an IP sharing router, please make sure that router supports
PPTP pass through function. In this example, the WL/IP-8000VPN’s
WAN IP address is 192.168.0.3. You can also register the
WL/IP-8000VPN with dynamic DNS if you don’t have a fixed IP address.
Finally, the local LAN has IP address 192.168.1.x. Please note that if the
Remote PC is behind a router, the remote PC’s IP subnet must be
different from the local IP subnet.
The Router’s PPTP server can support 5 PPTP VPN user’s accounts.
In the real world Internet connection, Remote PC would
not directly connect to the router, which is WL/IP-8000
VPN here. You need to set the correct Remote Gateway
both in WL/IP-8000VPN WAN port and Remote PC for
your own environment.
Router’s LAN, User’s LAN, and PPTP virtual LAN must
all have different LAN number. Router’s LAN is
192.168.1.x, user’s LAN is 192.168.0.y, and virtual LAN
is 10.0.0.z in this case.
- 10 -

OvisLink 8000VPN VPN Guide
Router Setup
6
5
2, 3, 4
1
7
1. Click on VPN button on top of this page
2. Check VPN Enable checkbox.
3. Check NetBIOS broadcast Enable checkbox.
4. Enter the Max number of tunnels as 1
5. Enter the Tunnel Name as Tunnel
6. Click on Save button at the bottom of the page (no need to reboot now)
7. Click on PPTP Server Setting button
- 11 -

OvisLink 8000VPN VPN Guide
8, 9, 10
11
12 13
8. Check PPTP Server Enable checkbox.
9. Change the Virtual IP of PPTP Server address, if needed
10.Change the Authentication Protocol to CHAP
11.Enter the Tunnel Name, User Name, and Password.
12.Click on Save button
13.Click on Reboot button. When asked to reboot shown in a pop-up
message, click OK to reboot and let the settings take effect.
- 12 -

OvisLink 8000VPN VPN Guide
Remote PC Setup (Using Windows XP VPN Client)
In case of Windows XP, the following steps shows PPTP client setting.
1. Go to Network
Connection on
Control Panel
2. Click on Create a
new connection.
3. Click on Next button
- 13 -

OvisLink 8000VPN VPN Guide
4. Click on Connect to
the network at my
workplace.
5. Click on Next button
6. Click on Virtual
Private Network
connection
7. Click on Next button
- 14 -

OvisLink 8000VPN VPN Guide
8. Enter the name of this
VPN connection. In
this case, the name is
To VPN router.
9. Click on Next
10. Enter the WAN IP
address or DDNS
domain name of your
VPN router.
11. Click on Next
192.168.0.3
- 15 -

OvisLink 8000VPN VPN Guide
12. If you would like this
connection to appear
on your desktop.
Please do so by
ticking the check box
of Add a shortcut to
the connection to m
y
desktop.
13. Click on Finish
button.
14. Click on Properties
button
- 16 -

OvisLink 8000VPN VPN Guide
15. Un-tick or cancel the
check box of Require
data encryption
(disconnect if none)
16. Click on OK
17. Enter your User name
and Password
18. Click on Connect
button.
- 17 -