User`s guide

Page 22 of 30 Rel. 3.5 Release Notes
Inter-operability with Third-Party VPN Gateways Release Notes
Release 3.5 Enhanced Support for VPN Clients
5. In the add Security Association window, enter the following values:
– Enter an SA Name
– Select From Rule (default) as the granularity of this SA.
– Select ESP/SHA/HMAC-160 as the Authentication Algorithm from the
pull-down menu.
– Select the Encryption Algorithm 3DES-168 from the pull-down menu.
– Select Tun ne l as the Encapsulation Mode.
– Select Group 1 (768 bits) as the Perfect Forward Secrecy value.
– Select the following values:
– Lifetime Measurement of Time.
– Data Lifetime of 10000.
– Time Lifedata of 86400.
– Enter 146.115.206.68 as the IKE Peer (the Public IP Address of the
ANG-1100).
– Enter Main as the IKE Negotiaotion Mode.
– Enter None for Digital Certificates (use Preshared Keys).
– Use the IKE Proposal just created from the pull-down menu.
– Click
APPLY.
NOTE
When you configure the connection in the Configuration> System> Tunneling
Protocols> IPSec LAN-to-LAN window, the Concentration Series Manager
automatically creates a group with the Peer IP Address as the Group Name.
6. Create a IPSec LAN-to-LAN tunnel. Click to Configuration> System>
Tunneling Protocols> IPSec and enter the following values:
– Enter the IPSEC Lan-to-Lan Configuration.
– Select the Interface to put the LAN-to-Lan connection.
– Enter the IP address of the remote peer for the LAN-to-LAN.
– Select None (use Preshared Keys) as the Digital Cerificates.
– Enter testing as the Preshared Key.
– Select ESP/SHA/HMAC-160 for Authentication from the pull-down
menu.
– Select 3DES-168 as the Encryption type.
– Select 3DES-SHA-DH2 as the IKE Proposal.
– Enter Trust LAN & Mask as the Local Network Information.
– Enter Remote LAN & Mask as the Remote Network Information.
– Click
APPLY.
7. Save your changes to the Configuration File.
Configuring VPN Settings on the ANG-1100
To configure the ANG-1100 to connect with the Cisco 3005, enter the following values
in the VPN Setup window of the Web Config utility of the ANG-1100. For more
information on configuring the ANG-1100, refer to the ANG-1100 User’s Guide.
Enter the following values in the appropriate fields. Be aware that IP addresses
displayed are sample parameters.