Digi Connect Series User guide

Digi Connect® Family Application Guide
How to Create a VPN between a Connect Gateway
and WatchGuard
_______________________________________________________________________
5/14/2009 Digi International 1 of 5
Scenario
Digi Connect WAN is used for remote site connectivity. The primary site is using a
WatchGuard VPN appliance. The two networks need to be connected, and the data needs
to be encrypted between them.
Theory of Operation
A remote location needs to be able to build a secure tunnel between the main site and a
remote branch. One location is using a Digi Connect gateway to provide primary internet
connectivity. The other location is using a WatchGuard VPN appliance for primary site
connectivity. AVPN tunnel will be created to the Digi Connect gateway, creating a
secure connection for data to pass through.
Sample Diagram
Internet Cloud
PCs, PLCs, etc.
Servers, PCs, PLCs, etc.
ConnectPort WAN
WAN IP: 1.2.3.4
LAN IP: 192.168.1.1 WatchGuard
WAN IP: 5.6.7.8
LAN IP: 192.168.111.1
Carrier Plan and PC / VPN Appliance Requirements
Digi Connect Requirements: Firmware version must be 2.8 or later. To download the
latest firmware, go to http://www.digi.com/support.
GSM GPRS/EDGE APN Type needed: VPN and GRE end-points usually require static
(persistent) IP addresses and must support mobile terminated data connections. If mobile
termination is not an option with your current APN, you will need to acquire a new one
that does support mobile termination.
CDMA networks may also require special plans to provide static IP addresses and
support mobile terminated data connections.
Check with your wireless provider on the available plan types.

Digi Connect Family Application Guide –Connect Gateway to WatchGuard
5/14/2009 Digi International 2 of 5
Digi Connect Gateway Configuration
1. Read and follow the quick-start guide for the Digi Connect gateway.
2. Assign a static IP address to the Ethernet port (the default address is 192.168.1.1).
3. Configure the Digi Connect gateway settings
a. Navigate to Configuration > Network > VPN Settings.
b. Click VPN Policy Settings.
c. Click Add.
d. Fill in the appropriate settings, shown in the screenshots below:

Digi Connect Family Application Guide –Connect Gateway to WatchGuard
5/14/2009 Digi International 3 of 5
e. Click Apply to save the changes.

Digi Connect Family Application Guide –Connect Gateway to WatchGuard
5/14/2009 Digi International 4 of 5
WatchGuard VPN Configuration
1. Configure the WatchGuard VPN device
a. Log into the Web Interface of the WatchGuard device.
b. Navigate to VPN in the left hand panel.
c. Under the section titled 'Manual VPN Gateways', click Configure.
d. Click Add to add a new VPN policy.
e. Fill in the appropriate information shown in the screenshots below
f. Click Submit to save the changes.

Digi Connect Family Application Guide –Connect Gateway to WatchGuard
5/14/2009 Digi International 5 of 5
ADDITIONAL NOTES
1. This configuration will work with Dynamic IP addresses, using hostnames
established with DynDNS.org. When using a Dynamic IP address, you will need to
set the VPN tunnel to use Aggressive Mode to make the connection work.
2. This configuration will work with other VPN parameters than what is listed in the
screenshots. i.e. –DES, 3DES, AES 192-bit, AES 256-bit, etc.
3. This configuration will work with other Digi Cellular products, such as the Connect
WAN, Connect WAN 3G, and ConnectPort WAN VPN series of products that
support VPN connections.
Where to Get More Information
Refer to the Digi Connect gateway user documentation and Digi technical support
website at www.digi.com/support for more information. Technical assistance is available
at http://www.digi.com/support/eservice/eservicelogin.jsp.
For sales and product information, please contact Digi International at 952-912-3444 or
refer to the Digi Cellular pages at www.digi.com.