3Com OfficeConnect, User Manual

Page: 65 / 112

65
3 Switch to the VPN Connections screen and click New.
4
Ensure that the Gateway to Gateway radio button is selected.
The remote Secure Router used in this example could be any
other IPSec-terminating VPN enabled device, e.g. a 3Com
SuperStack 3 Firewall.
5 Check that IPSec is selected as the Tunnel Type .
6
In the Tunnel Description field enter: Connection from head
office to sales office.
7 In the Remote IPSec Server ID field enter the ID of the REMOTE
Router.
a
Enter 172.27.34.202. on Router One
b Enter 174.19.201.162 on Router Two
8
Enter the Internet IP address of the other Secure Router in the
Remote IPSec Server Address field.
a Enter 172.27.34.202 on Router One.
b
Enter 174.19.201.162 on Router Two.
9 Enter the IP address of the other LAN subnet in the Remote
Network address field.
a
Enter 192.168.2.0 on Router One.
b Enter 192.168.1.0 on Router Two.
10
In this example, the Remote Subnet Mask is a default setting of
255.255.255.0; this is the subnet mask on the LANs of the two
devices.
11 Enter a password in the Tunnel Shared Key field in both
Gateways e.g. TYP0249//23b.
12 Choose 3DES as the Encryption Type.
13 Choose SHA-1 as the Hash Algorithm.
14
Choose Diffie-Hellman Group 2 (1024- bit) in the Exchange Keys
Using drop-down box.
15 Set Renegotiate After (seconds) to 600.
16
Ensure that the Use Perfect Forward Secrecy box is checked
17 Leave the Use IKE Keep-Alive box unchecked
18
Click Add to save your new connection or Close to return
without saving.
L2TP over IPSec Connections
If you have selected L2TP over IPSec as your Tunnel Type, enter
the following values. See
Figure 63 :
■
User Name — This is the username that the remote VPN
client will use to connect.
■
Password — The password that will need to be supplied to
connect.
Figure 63 L2TP over IPSec Connections
dua08609-5aaa01.book Page 65 Thursday, September 11, 2003 12:15 PM