D-Link DIR-130 - Broadband VPN Router Setup guide

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 1of 10
How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV
This setup example uses the following network settings:
In our example the IPSec VPN tunnel is established between two LANs: 192.168.0.x and
192.168.1.x.
NOTE: It is essential to have private networks (LAN 1 and LAN 2) on different subnets.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 2of 10
Configuration of the DIR-130
Step 1. Log into the DIR-130 by opening Internet Explorer and typing the LAN address of the
device. In our example we are using the default 192.168.0.1. Enter Username and Password
which you specified during the initial setup of the Firewall.
Step 2: Click on SETUP, select VPN SETTINGS, and select IPSec from the ADD VPN
PROFILE dropdown list and click Add.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 3of 10
Step 3: Configure the IPSec VPN as followed:
IPSEC SETTING
•Enable: check box to enable
•Name: enter a name for the VPN
•Encapsulation Mode:: Tunnel
•Remote IP: select Site to Site and enter the remote gateway
•Remote Local LAN Net /Mask: enter the remote network and remote subnet mask
Authentication: enter a Pre-shared Key (Pre-share key must match remote side)
PHASE 1
•IKE Proposal List: leave at default (3DES, SHA1)
PHASE 2
•IPSec Proposal List: leave at default (3DES, SHA1)
Click Save Settings.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 4of 10

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 5of 10
Configuration of DI804HV/808HV
Step 1: Open your web browser and type in the IP address of the router (192.168.0.1 by
default). Enter the username (admin by default) and password (blank by default), and then
click OK.
In our setup we changed the IP of the unit to 192.168.1.1 (NOTE both routers can not be
on the same subnet).
Step 2: Click on the Home tab and select the VPN button and configure as followed:
•VPN: check to enable
•Max. number of tunnels: enter the number of tunnels
ID 1
•Tunnel Name: enter a name of the VPN
•Method: select IKE
Click Apply to save the settings.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 6of 10
Step 3: Click on More under Method and configure as followed:
Tunnel Name: the name of the tunnel should already be entered if done in the previous step
•Local Subnet: enter the local subnet (192.168.0.0 in this example)
•Local Netmask: enter the local subnet mask(255.255.255.0 in this example)
•Remote Subnet: enter the remote subnet (192.168.1.0 in this example)
•Remote Netmask: enter the remote subnet mask(255.255.255.0 in this example)
•Remote Gateway: enter the remote gateway (172.68.140.140 in this example)
•IKE Keep Alive (Ping IP Address): enter an IP address of a client on the remote side
(192.168.1.100 in this example)
•Preshare Key: enter preshare key as desired (Pre-share key must match remote side)
•IPSec NAT Traversal: check to enable
•Auto-reconnect: check to enable
Click Apply to save the settings and click Continue when prompted.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 7of 10
Step 4: Click on Select IKE Proposal and configure as followed:
•Proposal Name: enter a name for the Proposal ID Number 1
•DH Group: Group 2
•Encrypt algorithm: 3DES
•Authentication Algorithm: SHA1
•Life Time: 28800
•Life Time Unit: Sec
•Proposal ID: select 1and click on Add To to add to the IKE Proposal index
Click Apply and then click Back.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 8of 10
Step 5: Click on Select IPSec Proposal and configure as followed:
•Proposal Name: enter a name for Proposal ID Number 1
•DH Group: Group 2
•Encapsulation Protocol: ESP
•Encryption Algorithm: 3DES
•Authentication Algorithm: SHA1
•Life Time: 3600
•Life Time Unit: Sec.
•Proposal ID: select 1and click on Add To to add to the IPSec Proposal index
Click Apply and then click Continue when prompted.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 9of 10
Step 6: Click on the Status tab and select the VPN Status button. The VPN should be
established. If the tunnel has not been established, click on the Refresh button or ping to an
IP address on the remote side. When replies are sent back, the tunnel has been established.

D-Link Technical Support – How to setup an IPSec VPN connection between a DIR-130 and DI-80xHV Page 10 of 10
Connecting to shared resources via VPN
To connect to shared resources via VPN you can map remote computers’ drives and folders
by opening Windows Explorer and going to Tools > Map Network Drive (you need to specify
the IP address of the computer on remote network and the name of the shared folder):
Alternatively you can do Search > Computers or People > Computer on Network > specify the
IP address of the computer you are trying to connect to.
If you do not see computers in My Network Places or My Network Neighbourhood you may
need to enable NetBIOS over TCP/IP in Windows.
Note that firewall/antivirus software installed on your or remote computer may stop you from
accessing remote network.