User Guide
Page 1
Client-to-Gateway using a preshared secret for Windows. Description how to -gateway VPN using pre-shared secrets Typical client-to configure the NCP Secure Entry Client for authentication. Document version 1.00 Using D-Link NetDefend Client v1.0 Prepared by the VPN Consortium Scenario 1. D-Link NetDefend VPN Client (DS-601/605) A quick installation guide to setting up the D-Link NetDefend VPN Client in a VPNC scenario These scenarios were developed by : NCP Engineering GmbH Dombuehler Strasse 2, 90449 Nürnberg, Germany Phone: +49-911-99.68.0 Fax: +49-911-99.68.299
Client-to-Gateway using a preshared secret for Windows. Description how to -gateway VPN using pre-shared secrets Typical client-to configure the NCP Secure Entry Client for authentication. Document version 1.00 Using D-Link NetDefend Client v1.0 Prepared by the VPN Consortium Scenario 1. D-Link NetDefend VPN Client (DS-601/605) A quick installation guide to setting up the D-Link NetDefend VPN Client in a VPNC scenario These scenarios were developed by : NCP Engineering GmbH Dombuehler Strasse 2, 90449 Nürnberg, Germany Phone: +49-911-99.68.0 Fax: +49-911-99.68.299
User Guide
Page 3
... 172.23.9.0/24, using IPv4 subnets 1.2 Using the Configuration Assistant Figure 1.2.1: Configuration Assistant The first time you start up the D-Link VPN Client you may be used in section 1.3. Gateway B's LAN interface address, 172.23.9.1, can either use the assistant as outlined in section 1.2, or modify an existing ...
... 172.23.9.0/24, using IPv4 subnets 1.2 Using the Configuration Assistant Figure 1.2.1: Configuration Assistant The first time you start up the D-Link VPN Client you may be used in section 1.3. Gateway B's LAN interface address, 172.23.9.1, can either use the assistant as outlined in section 1.2, or modify an existing ...
User Guide
Page 4
... with Pre-Shared Key. In this profile is created and given the name Gateway B with a modem (if available to the system) prior to building the VPN Tunnel. figure 1.2.3: Configuration Assistant: Link type (Dial up configuration) The VPN Client supports different media types;
... with Pre-Shared Key. In this profile is created and given the name Gateway B with a modem (if available to the system) prior to building the VPN Tunnel. figure 1.2.3: Configuration Assistant: Link type (Dial up configuration) The VPN Client supports different media types;
User Guide
Page 5
figure 1.2.5: Configuration Assistant: Pre-shared keys In this to ensure that it is used, identical passwords on the IPSec communicating peers. Enter in the given hr5xb84l6aa9r6 (see section 1.1) and confirm this example, a pre-shared key or shared secret is correctly entered in the gateway's IP address or DNS name. figure 1.2.4: Configuration Assistant: VPN gateway parameters Enter in . The Finish button will not be available until the values have been correctly entered in and match. Version 0.90 Page 5 of 15 06.Sep.04 Click Next >.
figure 1.2.5: Configuration Assistant: Pre-shared keys In this to ensure that it is used, identical passwords on the IPSec communicating peers. Enter in the given hr5xb84l6aa9r6 (see section 1.1) and confirm this example, a pre-shared key or shared secret is correctly entered in the gateway's IP address or DNS name. figure 1.2.4: Configuration Assistant: VPN gateway parameters Enter in . The Finish button will not be available until the values have been correctly entered in and match. Version 0.90 Page 5 of 15 06.Sep.04 Click Next >.
User Guide
Page 7
..., in this example, (although automatic mode works) both the IKE (Phase 1) and IPSec (Phase 2) Policies, the client will be manually defined in accordance to section 1.1; Version 0.90 Page 7 of different commonly used proposals and the VPN Gateway can then select one to continue... so select Policy lifetimes... figure 1.3.3: Profile Settings: General Review...
..., in this example, (although automatic mode works) both the IKE (Phase 1) and IPSec (Phase 2) Policies, the client will be manually defined in accordance to section 1.1; Version 0.90 Page 7 of different commonly used proposals and the VPN Gateway can then select one to continue... so select Policy lifetimes... figure 1.3.3: Profile Settings: General Review...
User Guide
Page 12
please refer to the manual for more details. figure 1.3.14: Profile Settings: IP Address Assignment In this example, the client is left blank. Click on IP Address Assignment to continue... Click on Remote Networks to move to the next dialog box. figure 1.3.13: Profile Settings: ...Identities In this scenario, the Gateway will not know what the IP Address is going to be, so the value is known to the VPN Gateway by a virtual IP address which has to be used, but are beyond the scope of 15 06.Sep.04 Other IKE-ID types can...
please refer to the manual for more details. figure 1.3.14: Profile Settings: IP Address Assignment In this example, the client is left blank. Click on IP Address Assignment to continue... Click on Remote Networks to move to the next dialog box. figure 1.3.13: Profile Settings: ...Identities In this scenario, the Gateway will not know what the IP Address is going to be, so the value is known to the VPN Gateway by a virtual IP address which has to be used, but are beyond the scope of 15 06.Sep.04 Other IKE-ID types can...
User Guide
Page 14
figure 1.3.17: Profile Settings Select OK to return to the monitor (the graphical user interface of the VPN Client) Version 0.90 Page 14 of 15 06.Sep.04
figure 1.3.17: Profile Settings Select OK to return to the monitor (the graphical user interface of the VPN Client) Version 0.90 Page 14 of 15 06.Sep.04
User Guide
Page 15
figure 1.4.2: Command Prompt: Ping response Version 0.90 Page 15 of the VPN Gateway to confirm the connection has been successfully established. Depending on the VPN Gateway's configuration other hosts on Connect to create the tunnel. Then open a dos box, and ping the internal network interface of 15 06.Sep.04 1.4 Establishing the connection figure 1.4.1: D-Link VPN Client Monitor Seeing as the connection is set to be established manually, click on the Gateway B's internal LAN can be reached.
figure 1.4.2: Command Prompt: Ping response Version 0.90 Page 15 of the VPN Gateway to confirm the connection has been successfully established. Depending on the VPN Gateway's configuration other hosts on Connect to create the tunnel. Then open a dos box, and ping the internal network interface of 15 06.Sep.04 1.4 Establishing the connection figure 1.4.1: D-Link VPN Client Monitor Seeing as the connection is set to be established manually, click on the Gateway B's internal LAN can be reached.