D-Link And TheGreenBow Solution DIR-130 Broadband VPN Router Application Note Version 1.
Revision History Date Rev. Description Editor 1.0 Interoperability Compliance Testing Negotiate mode for Phase1 and Phase2 using TheGreenBow VPN Client and DLink product’s DIR-130. John Yoong 2009-4-24 1. Introduction The objective of this document is to provide a guide describing how to configure the devices to achieve the same environment as show at the network topology.
5. Network Diagram Note: DIR-130 Router is set to allow IPSec pass through. It is important to note that this application note is also applicable to the following VPN routers: • DIR-130 • DIR-330 • DIR-730 6. Configurations In this document, we will only describe the main configurations for this Scenario. The configurations setting for all the D-Link products will not be described here and for more detail about the product you can download their user guide. 6.
1. Setup Phase 1 2. Setup Phase 2 6.1.1) Setup DIR-130 for VPN tunneling 6.1.1.1) 1) 2) Setup VPN Setting Click on the “VPN Settings” and add the VPN profile “IPSec”. First “Enable” the VPN IPSec and follow by filling all the information as show below according to your network environment.
3) Phase 1 and Phase 2 algorithms must be set the same as The GreenBow VPN Client software. Save the setting for the DIR-130 Broadband VPN Router.
.1.
6.1.2.1) 1) Setup Phase 1 Right click on the “Root” to add a new “Phase1”, next fill in the IP address for this VPN client and Remote gateway IP follow by Preshared Key and IKE setting. Note: the Preshared Key and IKE must be the same setting set in the DIR-130. 6.1.2.
1) Right click on the “Phase1” to add a new “Phase2”, next fill in the VPN Client address for this VPN client and Remote gateway IP follow by ESP setting. Note: the ESP Encryption and Authentication setting must be the same in the Broadband VPN Router DIR-130 phase 1 and phase 2 setting. 7.
7.1) General Test Approach a.
Series Negotiate Mode 7.2) Phase 1 Phase 2 AES-SHA DES-MD5 AES-MD5 DES-MD5 3DES-MD5 DES-MD5 3DES-SHA DES-MD5 DES-MD5 DES-MD5 DES-SHA DES-MD5 Test Result a. The VPN tunnel will be open at any negotiate mode set in Phase 1 and Phase 2.
TheGreenBow VPN Software b. The broadband VPN router DIR series will show the tunnel is up at their VPN status. DIR-130 VPN Status c. Client is able to Ping to the remote network.
8. Conclusion The Application Notes demonstrate how D-Link VPN products and TheGreenBow software combined perfectly address the requirements of the small and medium businesses worldwide. The joint VPN solution offer advantages around multiple access control and authorization mechanisms for users and tunneling capabilities to access the entire corporate network; it can also provide different access rights to different users.
D-Link Inc. All Rights Reserved D-Link is the worldwide leader and an award-winning designer, developer, and manufacturer of Wi-Fi and Ethernet networking, broadband, multimedia, voice and data communications and digital electronics solutions.