D-Link DSA-3600, User Manual

Page: 185 / 204

Appendix H. IPSec VPN
179
During the first login to the DSA-3600, Internet Explorer will ask user to download the ActiveX component of
IPSec VPN. This ActiveX component once downloaded will be running parallel with the “Login Success” page.
The ActiveX component helps to setup the IPSec VPN tunnel between client’s device and the DSA-3600. It also
helps to check the validity of the IPSec VPN tunnel between them. If the connection is down, the ActiveX
component will detect the broken link and recompose the IPSec tunnel. Once the IPSec VPN tunnel is built, any
packet sent will be encrypted. Without connecting to the original IPSec VPN tunnel, user or client device has no
alternative to gain network connection beyond this. The DSA-3600’s IPSec VPN feature is designed to solve
possible data security leak between client and the controller via either wireless or wired connection without extra
hardware or client software installed.
2. Limitations
The limitation on the client side due to ActiveX and Windows OS includes:
a.
Internet Connection Firewall of Windows XP or Windows XP SP1 not being compatible with IPSec protocol,
hence it shall be turned off to allow IPSec packets to pass through.
b.
Without patch, ICMP (Ping) and PORT command of FTP cannot work in Windows XP SP2.
c.
The Forced termination (through CTRL+ALT+DEL, Task Manager) of the Internet Explorer will stop the
running of ActiveX, which may result in IPSec tunnel not being able to work properly at client’s device. A
reboot of client’s device is needed to clear the IPSec tunnel.
d.
The crash of Windows Internet Explorer may cause the same result.