D-Link DI-804HV - Express ENwork Router User manual

DI-804HV with Windows 2000/XP IPsec VPN
Client Configuration Guide
This guide will show how to configure a Windows 2000/XP machine to make an IPsec VPN
Tunnel connection to a DI-804HV. Below is the example network that this document is based
on.
Technical Requirement: Customer is required to understand their network and Windows
2000/XP well for this configuration. Please consult a Microsoft certified professional if unsure.
The information provided here is for your reference only. D-Link will not be held responsible for
any consequences arise from it.
Windows 2000
Professional
Workstation
VPN Client
DI-804HV
LAN: 192.168.0.0/24
DSL-
300G+
Internet
Internet
WAN IP: 10.0.0.1 IP: 10.0.0.2

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 2
DI-804HV Configuration
1. Type in the IP address of
the DI-804HV in the
address bar of the browser.
Log-in using the default
username and password.
2. Click on VPN on the left-
hand side menu. Make
sure that VPN is checked
and enter 5 for maximum
number of tunnels. Click
on ‘Apply’ and then
‘Restart’ to save the
settings. Log-in again and
then Click on HomeÆVPNÆ
‘Dynamic VPN Settings’.
3. Enter the following details
for the Dynamic VPN
connection. Enter the
Tunnel name (client).
Enter the Local
Subnet/Netmask
(192.168.0.0/255.255.255.
0). Enter the pre-share
key. Click on ‘Apply’ and
then ‘Restart’ to save the
settings. Log-in again and
come back to this screen.
Now click on ‘Select IKE
Proposal’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 3
4. Under ID #1, enter the
name ‘3DES-MD5’, DH-
Group = Group2, Encrypt
algorithm = 3DES, Auth
algorithm = MD5, Life Time
= 28800, Life Time Unit =
Sec. Set the Proposal ID at
the bottom to #1 and then
click on the ‘Add to’ button.
Click on ‘Apply’ and then
‘Restart’.
5. Click on HomeÆVPNÆ
Click on ‘Dynamic VPN
Settings’ ÆClick on ‘Select
IPsec Proposal’. Under ID
#1, enter the Proposal
Name = 3DES-MD5, DH-
Group = Group2, Encap
Protocol = ESP, Encrypt
algorithm = 3DES, Auth
algorithm = MD5, Life Time
= 3600, Life Time Unit =
Sec. Set the Proposal ID at
the bottom to #1 and then
click on the ‘Add to’ button.
Click on ‘Apply’ and then
‘Restart’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 4
Windows 2000/XP Configuration
1. Go into StartÆRunÆand
the type in MMC to bring
up the Console.
2. Click on ConsoleÆand
then Click on Add/Remove
Snap In. In Windows XP,
click on FileÆAdd/Remove
Snap-in.
3. Click on the ‘Add’ Button.
4. Select ‘IP Security Policy
Management’ and then
Click on ‘Add’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 5
5. Select ‘Local computer’ and
then click on Finish.
6. Click on ‘Close’ on the Add
Standalone Snap-in
window.
7. Click on OK in the
‘Add/Remove Snap-in’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 6
8. Right-Click on IP Security
Policies on Local Machine.
Select ‘Create IP Security
Policy’.
9. The wizard should then
come up. Click ‘Next’ to
continue.
10.Enter the name for the
Policy as well as the
description. Click ‘Next’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 7
11.Uncheck ‘Activate the
default response rule’.
Click ‘Next’.
12.Click on ‘Finish’.
13.The Properties window for
the newly created policy
should then come up.
Click on ‘Add’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 8
14.Click on ‘Add’ under IP
Filter List.
15.Enter the name and the
description for the New IP
Filter List. Uncheck the
‘Use Add Wizard’. Click on
‘Add’.
16.Select ‘A specific IP subnet’
for the ‘Source address’
and enter the Internal LAN
range on the DI-804HV
side. Select ‘My IP
Address’ for the
‘Destination address’.
Uncheck the ‘Mirrored….’
Option at the bottom of
the screen. Click ‘OK’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 9
17.Click ‘Close’.
18.Select the newly created IP
Filter.
19.Click on the ‘Filter Action’
Tab. Select ‘Require
Security’. Click on ‘Edit’.

DI-804HV with Windows 2000/XP IPsec VPN Client Configuration Guide Page 10
20.Move the 3DES/MD5
security method to the top.
Check the ‘Session key
Perfect Forward Secrecy’.
Click ‘OK’.
21.Click on ‘Connection Type’
Tab. Select ‘All network
connections’.
22.Click on ‘Tunnel Setting’
Tab. Specify the tunnel
endpoint as the W2K
Pro/XP client IP address
(10.0.0.2 in this example).