EnGenius EVR-100 User manual

Wireless Gigabit VPN Router
EVR100 VPN Configuration Guide
Wireless N VPN Router with Gigabit Switch
V1.0

1
Table of Contents
1. Introduction ................................................................................................................................................................... 3
2. IPSec Site-to-Site...........................................................................................................................................................
2.1. Using the Wizard to Configure the Local EVR100 ......................................................................................................................6
2.2. Using the Wizard to Configure the Remote EVR100 .............................................................................................................. 12
2.3. Configuring the Local EVR100 anually..................................................................................................................................... 17
2.4. Configuring the Remote EVR100 anually................................................................................................................................ 24
3. IPSec Client-to-Site VPN............................................................................................................................................. 32
3.1. Using the Wizard to Configure the EVR100............................................................................................................................... 33
3.2. EVR100 anual VPN Profile Setting............................................................................................................................................. 37
3.3. Configuring TheGreenBow VPN Client ........................................................................................................................................ 44
. L2TP over IPSec............................................................................................................................................................ 9
4.1. Using the Wizard to Configure the EVR100............................................................................................................................... 50
4.2. Configuring the EVR100 anually................................................................................................................................................. 54
4.3. Configuring a icrosoft Windows 7 VPN Client ...................................................................................................................... 60
4.4. Configuring a icrosoft Windows Vista VPN Client............................................................................................................... 71
4.5. Configuring an Apple ac VPN Client......................................................................................................................................... 85

2
Revision History
Version Date Notes
1.0 2011/01/10 First Release

3
1. Introduction
A Virtual Private Network (VPN) provides a secure connection between two remote offices or two users over the public
Internet. It provides authentication to secure the encrypted data communicated between the two remote endpoints.
The EVR100 Wireless N Security VPN Router with Gigabit Switch supports Internet Protocol Security (IPSec) and Layer 2
Tunneling Protocol (L2TP over IPSec) to establish VPN tunnel connections. IPSec VPN tunnels support Site-to-Site tunnels
and Client-to-Site tunnels. L2TP over IPSec tunnels provide remote access when connecting Windows native VPN clients.
The EVR100 supports 5 IPSec VPN tunnels, making it ideal for small-office and home-office (SOHO) users. The EVR100 also
provides advanced SPI firewall, denial of service (DoS) attack blocking, AC filtering, and URL filtering to secure high-
speed network connections.
This Configuration Guide provides step-by-step instructions for setting up the following three VPN tunnels:
1. IPSec Site-to-Site using two EVR100 routers. See the next page.
2. IPSec Client to Site using TheGreenBow as an IPSec client. See page 32.
3. L2TP over IPSec using icrosoft Windows 7 and Windows Vista as VPN clients. See page 47.
This Guide ends with the procedure for configuring an Apple ac VPN client (see page 83).

4
2. IPSec Site-to-Site
IPSec Site-to-Site VPN tunnels typically are used when two remote locations want to exchange confidential data. To set up
an IPSec Site-to-Site VPN tunnel, configure two EVR100 VPN routers to establish a secured channel. The computers
connected to the EVR100s can then exchange the data securely using the VPN tunnel.
You can set up the VPN profile by either using a friendly, point-and-click Wizard or entering profile settings manually. To
set up your VPN profile in the quickest way possible, use the Wizard (see sections 2.2 ). If you are a technical user and
prefer to set up your VPN profile manually, see sections 2.3 and 2.4.
Figure 1. Example of an IPSec Site-to-Site VPN Tunnel
Local EVR100 (1
LAN IP:
192.168.0.100
WAN IP:
61.224.231.179
Remote EVR100 (2
EVR100 (1
EVR100 (2
WAN IP:
218.168.125.207
LAN IP:
192.168.2.100

5
Note: You can find the EVR100 WAN IP under System > Status.

6
2.1. Using the Wizard to Configure the Local EVR100
This configuration procedure corresponds to the EVR100 (1) in Figure 1.
1. In the left-side of the menu, click VPN.
2. In the top menu, click Wizard to display the Setup Wizard.
3. Click Next to create an IPSec Site-to-Site VPN tunnel.

7
4. In the Name field, enter a name for the Site-to-Site VPN tunnel. This name is for reference purposes. Click Next.
5. Click IPSec, and then click Next.

8
6. Click Site to Site, and then click Next.

9
7. Complete the following fields:
Security Gateway Enter the WAN IP of the remote EVR100 (2) to which you want to connect. In Figure 1,
this is EVR100 (2).
Remote Address Enter an IP address that is on the same subnet as the LAN IP address of the computer
connected behind the remote EVR100 (2). In Figure 1., for example, enter a remote
address starting with: 192.168.2.x.
Remote Netmask Type 255.255.255.0.
Click Next.

10
8. Create the Shared key for the local EVR100 (1) VPN, and then click Next.
Note: By default, the SA (Security Association) is ESP-3DES-SHA1. If desired, you can change it after using the Wizard to
add the VPN profile.

11
9. Check the option below to enable the VPN policy, and then click Apply to save the local EVR100 (1) VPN profile.
This completes the procedure for configuring your local EVR100 (1) VPN profile.

12
2.2. Using the Wizard to Configure the Remote EVR100
After you configure the local EVR100, use the following procedure to configure the remote EVR100 VPN Profile. This
procedure is similar to the one used to configure the local EVR100. This configuration procedure corresponds to the
EVR100 (2) in Figure 1. Example of an IPSec Site-to-Site VPN Tunnel.
1. Enter the Name for the remote EVR100 (2) VPN profile, and then click Next.

13
2. Click IPSec, and then click Next.
3. Click Site to Site, and then click Next.

14
4. Complete the following fields:
Security Gateway Enter the WAN IP of the local EVR100 (1) to which you want to connect. In Figure 1, this
is EVR100 (1).
Remote Address Enter an IP address that is on the same subnet as the LAN IP address of the computer
connected behind the EVR100 (1). In Figure 1, for example, enter a local address starting
with: 192.168.0.x.
Remote Netmask Type 255.255.255.0.
Click Next.

15
5. Create the Shared key for the remote EVR100 VPN, and then click Next.
Note: By default, the SA (Security Association) is ESP-3DES-SHA1. If desired, you can change it after using the Wizard to
add the VPN profile.

16
6. Check the option below to enable the VPN policy, and then click Apply to save the remote EVR100 VPN profile.
This completes the procedure for configuring your remote EVR100 (2) VPN profile.

17
2.3. Configuring the Local EVR100 Manually
The following procedure describes how to manually configure the local EVR100 for an IPSec Site-to-Site VPN tunnel. This
configuration procedure corresponds to the EVR100 (1) in Figure1. Example of an IPSec Site-to-Site VPN Tunnel.
1. In left-side of the menu, click VPN.
2. In the top menu, click Profile Setting.
3. Click Add to create an IPSec Site-to-Site VPN tunnel.

18
4. Complete the following fields:
Name Enter a name for the local EVR100 (1) VPN profile.
Connection Type Click IPSec.
Shared Key Create a shared key for the local EVR100 (1) VPN profile and Confirm the shared key.
Local ID Type Select IP Address, Domain Name, or E-Mail Address. Then complete the following
fields appropriately.
Local ID If you selected IP Address for Local ID Type, enter the WAN IP address of the local
EVR100 (1).
If you selected Domain Name for Local ID Type, enter the domain name of the local
EVR100 (1).
If you selected E-Mail Address for Local ID Type, enter an email address to identify the
local EVR100 (1).
Peer ID Type Select the same option you chose for Local ID Type.
Peer ID Enter the WAN IP address of the remote EVR100 (2) if you select the IP Address in Peer
ID Type.
Enter the Domain Name of the remote EVR100 (2) if you select the Domain Name in
Peer ID Type.
Enter the email address of the remote EVR100 (2) if you select the E- ail Address in
Peer ID Type.

19