User guide

Chapter 4 – Configuration Examples
22 Multi-Tech Systems, Inc. RF760/660/600VPN Quick Start Guide (82013762L)
Example 2 – Remote Client-to-LAN VPN Configuration
This example shows the setup for the RF660VPN that will allow a remote client to see a LAN and where the remote client is
using SSH Sentinel.
Use the VPN function to set up your RouteFinder VPN so that your network allows a remote client to have access to the LAN
through a secure tunnel on the Internet. Your RouteFinder VPN includes an easy-to-use IPSec-VPN-client connection that
transparently secures your Internet communications anytime, anywhere.
This setup requires:
• One RouteFinder VPN at the home office and
• A remote client with SSH Sentinel software.
For the SSH Sentinel Client Setup at the remote site, see the separate SSH Sentinel Guide.
SSH Sentinel Client Accessing LAN Through
RF660VPN (Input these parameters on the
RF660VPN located in the home office).
1. Domain name = Sentinel
2. Public Class C = 204.26.122.x
3. Networks & Services > Network
LAN: 192.168.2.0 – 255.255.255.0
Sentinel_Client: 204.26.122.50 – 255.255.255.255
4. Network Setup > Interface
Default gateway = 204.26.122.1
Host name = RF660VPN.Site-A.com
Eth0 = LAN, 192,168.2.1, 255.255.255.0
Eth1 = WAN, 204.26.122.103, 255.255.255.0
Eth2 = DMZ (don’t care)
5a. Packet Filters > Packet Filter Rules (remote client
static IP)
LAN – ANY – ANY – Accept
Sentinel – ANY – ANY – Accept
5b. Packet Filter > Packet Filter Rules (remote client
dynamic IP)
ANY – ANY – ANY – Accept
6. VPN > IPSec
Checkmark and Save VPN Status
Add an IKE connection:
Connection name = Sentinel
Checkmark Perfect Forward Secrecy
Authentication Method = Secret
Enter secret key (must be same both sides)
Select Encryption = 3DES
Local Interface = WAN
Local LAN Subnet = LAN
Remote IP = Sentinel_Client (remote client static IP)
Remote IP = Any (remote client dynamic IP)
Remote Subnet = None
UID = Disable