DEFINING TUNNELS
MultiConnect
®
rCell 100 MTR-LTE User Guide
55
The default set of DH Group Algorithms is:
DH2(1024-bit), DH5(1536-bit), DH14(2048-bit), DH15(3072-bit),
DH16(4096-bit), DH17(6144-bit), DH18(8192-bit), DH22(1024-bit), DH23(2048-bit)
, and
DH24(2048-bit)
.
To set up a Network-to-Network VPN tunnel on your router:
1.
From the Web Management interface, go to
Tunnels > IPsec Tunnels
.
2.
Click
Add Tunnel
in upper right.
3.
Enter a name for the tunnel and an optional description.
4.
Click
Next
. The
IPsec Remote Tunnel Endpoint
pane opens.
5.
In the
Remote WAN IP
field, enter the external IP address of the remote endpoint.
6.
In the
Remote Network Route
and
Mask
fields, enter the remote subnet.
7.
Choose
Tunnel Type
from the drop-down menu. Values are
IKE
and
IKEv2
.
8.
Click
Next
. The public IP address and LAN of this device do not need to be configured because they are
already known by this device.
9.
Enter the
Pre-Shared Key
. This key needs to be the same on both endpoints.
10.
Select the
Encryption Method
.
AES
is the successor of
3DES
and is recommended, but
3DES
may be
required to operate with legacy endpoints. The encryption method needs to be the same on both
endpoints.
11.
Click
Next
.
12.
If the remote endpoint is set up with unique IDs, check the
Enable UID
box, and enter the
Local and
Remote IDs
.
13.
Click
Finish
.
14.
To save your changes, click
Save and Restart
.
For field descriptions, see
IPsec Tunnel Configuration Field Descriptions
.
IPsec Tunnel Configuration Field Descriptions
Field
Description
IPSec Tunnel
Name
Name used to identify the IPsec tunnel in configurations and logs.
Description
Optional text to describe the IPsec tunnel. This description shows up in
the UI while hovering over the summary of an IPsec tunnel.
IPSec Remote Tunnel Endpoint
Remote WAN IP
External IP address of the remote tunnel endpoint. The remote device is
typically another router.
Saved Network
Select a saved network from the pre-defined list of user-defined
networks on the
Setup > Saved Networks
page. This network describes
the remote endpoint's subnet, and is used to identify packets that are
routed over the tunnel to the remote network.
Remote Network Route
This field is used in conjunction with the
Remote Network Mask
field
and describes the remote endpoint's subnet. This is used to identify
packets that are routed over the tunnel to the remote network.
