Digi Connect Series User guide

Digi Connect® Family Application Guide
How to Create a VPN between Digi and D-Link
________________________________________________________________________
5/11/2009 Digi International 1 of 6
Scenario
Digi Connect family VPN router (for example ConnectPort WAN or Digi Connect WAN
IA) is used for remote site connectivity. The primate site is using a D-Link VPN
appliance. The two networks need to be connected, and the data needs to be encrypted
between them.
Theory of Operation
A remote location needs to be able to build a secure tunnel between the main site and a
remote branch. One location is using a Digi Connect router to provide primary internet
connectivity. The location is using a D-Link router for primary site connectivity. AVPN
tunnel will be created to the Digi Connect router, creating a secure connection for data to
pass through.
Sample Diagram
Internet Cloud
WAN IP: 5.6.7.8
LAN IP: 192.168.1.1/24 WAN IP: 1.2.3.4
LAN IP: 172.16.1.1
PCs, PLCs, Servers, Etc.
PCs, PLCs, Servers, Etc.
Carrier Plan and PC / VPN Appliance Requirements
Digi Connect Router Requirements: Firmware version must be 2.8 or later. To
download the latest firmware, go to http://www.digi.com/support.
GSM GPRS/EDGE APN Type needed: VPN and GRE end-points usually require static
(persistent) IP addresses and must support mobile terminated data connections. If mobile
termination is not an option with your current APN, you will need to acquire a new one
that does support mobile termination.
CDMA networks may also require special plans to provide static IP addresses and
support mobile terminated data connections.
Check with your wireless provider on the available plan types.

Digi Connect Family Application Guide –Digi to D-Link
5/11/2009 Digi International 2 of 6
Digi Connect Router Configuration
1. Read and follow the quick-start guide for the Digi Connect router and optionally for
Digi Connectware® Manager if used.
2. Assign a static IP address to the Ethernet port (the default address is 192.168.1.1).
Note the default gateway may show or change to an address such as 10.6.6.6. This is
normal as it is the cellular provider’s network default gateway.
3. Configure the Digi Connect router settings
a. VPN Policy Settings
i. Click on VPN Policy Settings.
ii. Click on the Add button to setup the individual tunnel.
iii. Fill in the appropriate information, shown in the following
screenshots:

Digi Connect Family Application Guide –Digi to D-Link
5/11/2009 Digi International 3 of 6
iv. Click Apply after filling in the above information to complete the
tunnel setup on the Digi Connect router.
D-Link VPN Configuration
1. Configure the D-Link VPN device
a. Log into the Web Interface of the D-Link device.
b. Navigate to Firewall > VPN.
c. Click Add New under the section called IPsec Tunnels.
d. Fill in the appropriate information show in the following screenshots

Digi Connect Family Application Guide –Digi to D-Link
5/11/2009 Digi International 4 of 6
e. Click Apply to save the changes.
f. Click Edit on the newly created item on the VPN page under the IPsec
Tunnels heading.
g. Click Advanced to configure additional parameters, as shown in the
following screenshots:

Digi Connect Family Application Guide –Digi to D-Link
5/11/2009 Digi International 5 of 6
h. Click Apply to save the changes.
i. Click Activate on the left hand side to commit the changes that were done
to the running configuration of the device.

Digi Connect Family Application Guide –Digi to D-Link
5/11/2009 Digi International 6 of 6
ADDITIONAL NOTES
1. This configuration will work with Dynamic IP addresses, using hostnames
established with DynDNS.org, or using the DDNS update feature of Digi
Connectware® Manager. When using a Dynamic IP address, you will need to set the
VPN tunnel to use Aggressive Mode to make the connection work.
2. This configuration will work with other VPN parameters than what is listed in the
screenshots. i.e. –DES, 3DES, AES 192-bit, AES 256-bit, etc.
3. This configuration will work with other Digi Cellular products, such as the Connect
WAN, Connect WAN 3G, and ConnectPort WAN VPN series of products that
support VPN connections.
Where to Get More Information
Refer to the Digi Connect router user documentation and Digi technical support website
at www.digi.com/support for more information. Technical assistance is available at
http://www.digi.com/support/eservice/eservicelogin.jsp.
For sales and product information, please contact Digi International at 952-912-3444 or
refer to the Digi Connect wireless pages at www.digi.com.