User Guide

Page 124 SonicWALL Internet Security Appliance User’s Guide
Enabling Group VPN on the SonicWALL
Click VPN on the left side of the SonicWALL browser window, and then click the Configure
tab.
The SonicWALL VPN tab defaults to a Group VPN setting. This feature facilitates the set
up and deployment of multiple VPN clients by the administrator of the SonicWALL
appliance. Security settings can now be exported to the remote client and imported into
the remote VPN client settings. Group VPN allows for easy deployment of multiple VPN
clients and it is not necessary to individually configure remote VPN clients. Group VPN is
only available for VPN clients and it is recommended to use Authentication Service or
XAUTH/RADIUS in conjunction with the Group VPN for added security.
To enable Group VPN, follow the instructions below:
1. Click VPN on the left side of the Management Station interface.
2. Click on Group VPN. The Security Association default setting is Group VPN.
3. Configure the Group VPN to use either IKE using Pre-shared Secrets or IKE
using Certificates. To use certificates, an Authentication Service upgrade must
be purchased.
4. Select Group 2 from the Phase 1 DH Group menu.
5. Enter the SA Life Time value in minutes. A value of 28800 seconds (8 hours) is
recommended.
6. Select DES & SHA1 from the Phase 1 Encryption/Authentication menu.
integrated_manual.book Page 124 Friday, October 12, 2001 2:56 PM