EnGenius EVR-100 User manual

Wireless Gigabit VPN Router
EVR100 VPN Configuration Guide
Wireless N VPN Router with Gigabit Switch
V1.0

1
Table of Contents
1. Introduction ................................................................................................................................................................... 3
2. IPSec Site-to-Site...........................................................................................................................................................
2.1. Using the Wizard to Configure the Local EVR100 ......................................................................................................................6
2.2. Using the Wizard to Configure the Remote EVR100 .............................................................................................................. 12
2.3. Configuring the Local EVR100 anually..................................................................................................................................... 17
2.4. Configuring the Remote EVR100 anually................................................................................................................................ 24
3. IPSec Client-to-Site VPN............................................................................................................................................. 32
3.1. Using the Wizard to Configure the EVR100............................................................................................................................... 33
3.2. EVR100 anual VPN Profile Setting............................................................................................................................................. 37
3.3. Configuring TheGreenBow VPN Client ........................................................................................................................................ 44
. L2TP over IPSec............................................................................................................................................................ 9
4.1. Using the Wizard to Configure the EVR100............................................................................................................................... 50
4.2. Configuring the EVR100 anually................................................................................................................................................. 54
4.3. Configuring a icrosoft Windows 7 VPN Client ...................................................................................................................... 60
4.4. Configuring a icrosoft Windows Vista VPN Client............................................................................................................... 71
4.5. Configuring an Apple ac VPN Client......................................................................................................................................... 85

2
Revision History
Version Date Notes
1.0 2011/01/10 First Release

3
1. Introduction
A Virtual Private Network (VPN) provides a secure connection between two remote offices or two users over the public
Internet. It provides authentication to secure the encrypted data communicated between the two remote endpoints.
The EVR100 Wireless N Security VPN Router with Gigabit Switch supports Internet Protocol Security (IPSec) and Layer 2
Tunneling Protocol (L2TP over IPSec) to establish VPN tunnel connections. IPSec VPN tunnels support Site-to-Site tunnels
and Client-to-Site tunnels. L2TP over IPSec tunnels provide remote access when connecting Windows native VPN clients.
The EVR100 supports 5 IPSec VPN tunnels, making it ideal for small-office and home-office (SOHO) users. The EVR100 also
provides advanced SPI firewall, denial of service (DoS) attack blocking, AC filtering, and URL filtering to secure high-
speed network connections.
This Configuration Guide provides step-by-step instructions for setting up the following three VPN tunnels:
1. IPSec Site-to-Site using two EVR100 routers. See the next page.
2. IPSec Client to Site using TheGreenBow as an IPSec client. See page 32.
3. L2TP over IPSec using icrosoft Windows 7 and Windows Vista as VPN clients. See page 47.
This Guide ends with the procedure for configuring an Apple ac VPN client (see page 83).

4
2. IPSec Site-to-Site
IPSec Site-to-Site VPN tunnels typically are used when two remote locations want to exchange confidential data. To set up
an IPSec Site-to-Site VPN tunnel, configure two EVR100 VPN routers to establish a secured channel. The computers
connected to the EVR100s can then exchange the data securely using the VPN tunnel.
You can set up the VPN profile by either using a friendly, point-and-click Wizard or entering profile settings manually. To
set up your VPN profile in the quickest way possible, use the Wizard (see sections 2.2 ). If you are a technical user and
prefer to set up your VPN profile manually, see sections 2.3 and 2.4.
Figure 1. Example of an IPSec Site-to-Site VPN Tunnel
Local EVR100 (1
LAN IP:
192.168.0.100
WAN IP:
61.224.231.179
Remote EVR100 (2
EVR100 (1
EVR100 (2
WAN IP:
218.168.125.207
LAN IP:
192.168.2.100

5
Note: You can find the EVR100 WAN IP under System > Status.

6
2.1. Using the Wizard to Configure the Local EVR100
This configuration procedure corresponds to the EVR100 (1) in Figure 1.
1. In the left-side of the menu, click VPN.
2. In the top menu, click Wizard to display the Setup Wizard.
3. Click Next to create an IPSec Site-to-Site VPN tunnel.

7
4. In the Name field, enter a name for the Site-to-Site VPN tunnel. This name is for reference purposes. Click Next.
5. Click IPSec, and then click Next.

8
6. Click Site to Site, and then click Next.

9
7. Complete the following fields:
Security Gateway Enter the WAN IP of the remote EVR100 (2) to which you want to connect. In Figure 1,
this is EVR100 (2).
Remote Address Enter an IP address that is on the same subnet as the LAN IP address of the computer
connected behind the remote EVR100 (2). In Figure 1., for example, enter a remote
address starting with: 192.168.2.x.
Remote Netmask Type 255.255.255.0.
Click Next.