Set up a Virtual Private Network (VPN)
107
In the Remote Side section, enter the LAN-side IP subnet of the gateway with the
subnet mask in CIDR format.
The gateway and the client’s network must have different subnet ranges that do not
overlap.
8. Click the
Phase 1
tab.
9. Specify the following:
Lifetime:
Enter
1800
and select
Seconds
.
DH
Group:
Select
1024 (2)
.
Encryption:
Select
3DES
.
Authentication:
Select
SHA-1
.
Exchange Mode: Select
Main
.
Proposal Check: Select
Obey
.
Nonce Size: Enter
16
.
10. Click the
Phase
2 tab.
11. Specify the following:
Lifetime:
Enter
1800
and select
Seconds
.
PFS
Group:
Select
1024 (2)
.
Encryption: Select the
DES
,
3DES
,
AES 2256
,
AES 192
, and
AES 128
check boxes.
Authentication: Select the
HMAC MDS
and
HMAC SHA-1
check boxes.
12. Click the
ID
tab.
13. Specify the following:
Leave the Local Identifier and Remote Identifier fields set to
Address
.
Select
XAuth PSK
in the Authentication Method section and type the pre-shared
key, user name, and password that you specified in the gateway.
14. Click the
Options
tab.
15. Specify the following:
●
Select these check boxes:
IPSec DOI