User manual ZYXEL ZYWALL 10 GREENBOW VPN CLIENT

[. . . ] 0 TheGreenBow IPSec VPN Client configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 0 VPN Client Phase 1 (IKE) Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] All the addresses in this document are given for example purpose. 192. 168. 1. 3 80. 11. 8. 4 155. 2. 4. 36 192. 168. 1. 1 Internet Zyxel ZyWall 10 192. 168. 1. 78 192. 168. 100. 57 IPSec VPN Router Configuration Property of TheGreenBow Sistech SA - © Sistech 2001-2005 3/12 Doc. Ref Doc. version VPN version tgbvpn_cg_ZyWall10_en 2. 0 ­ Nov. 2004 2. 5x 2 ZyWall VPN Configuration ZyNOS Firmware version release of the Zyxel ZyWall 10 used during tests was ZyNOS 3. 52 (WA. 3) | 05/28/2003. 2. 1 ZyWall VPN Configuration interface Zywall VPN configuration can be achieved with a web browser. Read Zyxel ZyWALL 10 documentation for more information. Once connected to your VPN gateway, click on "VPN" link in the Zyxel ZyWALL 10 VPN configuration interface. Select a VPN connection and click on "Edit": 2. 2 ZyWall IKE Mode Click on "Active". Select "IKE" and "Main" if you want to use IKE Main mode exchange. IPSec VPN Router Configuration Property of TheGreenBow Sistech SA - © Sistech 2001-2005 4/12 Doc. Ref Doc. version VPN version tgbvpn_cg_ZyWall10_en 2. 0 ­ Nov. 2004 2. 5x 2. 3 ZyWall Phase 2 IDs The settings "Local" and "Remote" are in fact Phase 2 IDs. In Local Address Type, you must select "Subnet Address" and fill the field "Starting IP Address" with the IP addresses of your LAN. 2. 4 ZyWall Phase 1 IDs Phase 1 IDs are set in the following view of the configuration interface. We choose to use IP Addresses as IDs. 2. 5 ZyWall IPSec Protocol Next step consists into selecting IPSec Protocol. TheGreenBow VPN client do not accept AH protocol. Set the Pre-Shared Key and click on "Advanced". IPSec VPN Router Configuration Property of TheGreenBow Sistech SA - © Sistech 2001-2005 5/12 Doc. Ref Doc. version VPN version tgbvpn_cg_ZyWall10_en 2. 0 ­ Nov. 2004 2. 5x 2. 6 ZyWall Authentication and encryption algorithms For Phase 1, select the algorithm you want. DH1 is also known as Diffie-Hellman 768 and DH2 as Diffie-Hellman 1024. For Phase 2, do not forget to select "ESP" as active protocol. Click on « Apply » once you have finished. IPSec VPN Router Configuration Property of TheGreenBow Sistech SA - © Sistech 2001-2005 6/12 Doc. Ref Doc. version VPN version tgbvpn_cg_ZyWall10_en 2. 0 ­ Nov. 2004 2. 5x 3 TheGreenBow IPSec VPN Client configuration 3. 1 VPN Client Phase 1 (IKE) Configuration In the "Interface" field, you can select a star ("*"), if the client host receive a dynamic IP Address from an ISP for example. The "Remote Address" field value is the Zyxel ZyWALL VPN router public IP address or DNS address. By clicking in "Advanced" button, you can setup "Phase 1 Ids" and "Aggressive Mode". The remote Gateway IP address is either an explicit IP address, abcdefgh abcdefgh Phase 1 configuration 3. 2 VPN Client Phase 2 (IPSec) Configuration In this window, you define IPSec VPN Policy. [. . . ] You will have an indication that encryption works. Check the "default gateway" value in VPN Server LAN. [. . . ]