Linksys Official Support - Setting Up a VPN Tunnel on Two (2) Routers
description
Transcript of Linksys Official Support - Setting Up a VPN Tunnel on Two (2) Routers
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 1/23
AVirtualPrivateNetwork(VPN)isaconnectionbetweentwoendpointsaVPNrouter,forinstanceindifferentnetworksthatallowsprivatedatatobesentsecurelyoverasharedorpublicnetwork,suchastheInternet.Thisestablishesaprivatenetworkthatcansenddatasecurelybetweenthesetwolocationsornetworksthrougha"tunnel."AVPNtunnelconnectsthetwoPCsornetworksandallowsdatatobetransmittedovertheInternetasifitwerestillwithinthosenetworks.Itisaconnectionsecuredbyencryptingthedatasentbetweenthetwonetworks.
TosetupaVPNTunnelonaLinksysrouteryouneedtoperformfoursteps:
1. ConnectingDevicesTogether2. VerifyingtheVPNSettingsNeededontheTwoRouters3. ConfiguringVPNTunnelsettingsonRouterA4. ConfiguringVPNTunnelsettingsonRouterB
ConnectingDevicesTogether
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 2/23
BeforeconnectingtoaVPNtunnelyouneedtoensurethatthereisanactiveInternetconnectionbetweenthetworoutersthatwillcommunicate.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4011).AfterensuringthatthereisanactiveInternetconnection,youneedtoverifytheVPNsettings.ToverifytheVPNsettingsofthetworouters,followtheinstructionsbelow.
VerifyingtheVPNSettingsNeededontheTwoRouters
InorderforyoutosuccessfullyconfigureaVPNtunnel,youneedtotakenoteofthesettingsneededtosetupatunnel.ToverifythesettingsneededforyourVPNTunnelfollowthestepsbelow.
Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).
NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).
Step2:ClickStatusthenGatewayandtakenoteoftheInternet/WANIPaddress.
RouterAsStatuspage:
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 3/23
RouterBsStatuspage:
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 4/23
Step3:ClickStatusthenLocalNetworkandtakenoteoftheIPaddress.
RouterAsStatuspage:
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 5/23
RouterBsStatuspage:
Setting up a VPN Tunnel on two(2) routers
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 6/23
NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).
Step4:MakesuretheLocalIPAddressofthetworoutersaredifferent.TakenotethattheLocalIPAddressofRouterAwillbeRouterBsRemoteSecureGroup.
NOTE:TochangethelocalIPaddressofaLinksysrouter,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3957).
Inthisexample,wewillusethefollowing:
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 7/23
Step5:Afterverifyingthesettingsneededtosetupatunnel,youneedtoconfigurethesettingsonRouterA.Forinstructions,followthestepsbelow.
ConfiguringVPNTunnelsettingsonRouterA
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 8/23
Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).
NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).
Step2:Whentherouterswebbasedsetuppageappears,clickSecuritythenVPN.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 9/23
NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).
Step3:SelecttheTunnelentryyouwishtocreate.
Step4:LookforVPNTunnelthenselectEnabled.
Step5:UnderTunnelNameenterthenameyouwanttosetyourtunnel.InthisexampleTunnel1wasused.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 10/23
Step6:LookforLocalSecureGroupandselecteitherSubnet,IPAddr.orIPRange,thenonthefieldsprovidedentertheappropriatevaluesoftherouter.Inthisexample,weselectedSubnetandentered192.168.1.0fortheIPand255.255.255.0fortheMask.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 11/23
Step7:UnderRemoteSecureGroup,selecteitherSubnet,IPAddr.,IPRange,HostorAny,thenonthefieldsprovidedentertheappropriatevaluesoftheremoterouter.Inthisexample,weselectedSubnetandentered192.168.2.0fortheIPand255.255.255.0fortheMask.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 12/23
Step8:LookfortheRemoteSecurityGatewaydropdownmenuandselecteitherIPAddr.,FQDNorAny,thenentertheWAN/InternetIPaddressortheDDNSoftheremoterouter.Inthisexample,weselectedIPAddr.andentered10.100.16.60fortheIPAddressfield.
Step9:UnderEncryption,selecttheencryptionlevelyouwishtoenableonyourtunnel.InthisexampleweusedDES.
NOTE:MakesuretheEncryptionlevelselectedisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.
Step10:UnderAuthentication,selecttheauthenticationmodeyouwishtoenableonyourtunnel.InthisexampleweusedMD5.
NOTE:MakesuretheAuthenticationmodeselectedisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 13/23
Step11:UnderKeyManagement,selectAuto(IKE).
Step12:MakesurePFS(PerfectForwardSecrecy)isEnabled.ThiswillensurethattheinitialkeyexchangeandIKEproposalsaresecured.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 14/23
Step13:UnderPresharedKey,enterthekeyyouwanttoenableonyourtunnel.InthisexampleMySecretKeywasused.
Step14:UnderKeyLifetime,enterthetimeperiodyouwantthekeytoexpireonyourtunnel.Inthisexample3600wasused.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 15/23
NOTE:MakesurethePresharedKeyandKeyLifetimeenteredarethesamewiththeremoterouter.
Step15:Click .
Step16:Afterverifyingthesettingsneededtosetupatunnel,youneedtoconfigurethesettingsonRouterB.Forinstructions,followthestepsbelow.
ConfiguringVPNTunnelsettingsonRouterB
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 16/23
Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).
NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).
Step2:Whentherouterswebbasedsetuppageappears,clickSecuritythenVPN.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 17/23
NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).
Step3:SelecttheTunnelentryyouwishtocreate.
Step4:LookforVPNTunnelandselectEnabled.
Step5:UnderTunnelName,enterthenameyouwanttosetyourtunnel.InthisexampleTunnel1wasused.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 18/23
Step6:LookforLocalSecureGroupandselecteitherSubnet,IPAddr.orIPRange,thenonthefieldsprovidedentertheappropriatevaluesoftherouter.Inthisexample,weselectedSubnetandentered192.168.2.0fortheIPand255.255.255.0fortheMask.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 19/23
Step7:UnderRemoteSecureGroupselecteitherSubnet,IPAddr.,IPRange,HostorAny,thenonthefieldsprovidedentertheappropriatevaluesonyourrouter(thisvaluesshouldbefromtheremoterouter).InthisexampleweselectSubnetandenter192.168.1.0fortheIPand255.255.255.0fortheMask.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 20/23
Step8:LookfortheRemoteSecurityGatewaydropdownmenuandselecteitherIPAddr.,FQDNorAny,thenentertheWAN/InternetIPaddressortheDDNSoftheremoterouter.Inthisexample,weselectedIPAddr.andentered22.15.160.53fortheIPAddressfield.
Step9:UnderEncryption,selecttheencryptionlevelyouwishtoenableonyourtunnel.InthisexampleweusedDES.
NOTE:MakesuretheEncryptionlevelisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.
Step10:UnderAuthentication,selecttheauthenticationmodeyouwishtoenableonyourtunnel.InthisexampleweusedMD5.
NOTE:MakesuretheAuthenticationmodeisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 21/23
Step11:UnderKeyManagement,selectAuto(IKE).
Step12:MakesurePFS(PerfectForwardSecrecy)ischecked.ThiswillensurethattheinitialkeyexchangeandIKEproposalsaresecured.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 22/23
Step13:UnderPresharedKey,enterthekeyyouwanttoenableonyourtunnel.InthisexampleMySecretKeywasused.
Step14:UnderKeyLifetime,enterthetimeperiodyouwantthekeytoexpireonyourtunnel.Inthisexample3600wasused.
-
6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers
http://www.linksys.com/us/supportarticle?articleNum=132865 23/23
NOTE:MakesurethePresharedKeyandKeyLifetimeenteredarethesamewiththeremoterouter.
Step15:Click .
Step16:Click .