VPN van Prestige652/650 naar DrayTek Vigor2600 instellen


referentie Z113B


Dit document bevat alle relevante gegevens (IP-adressen, firmware versies) en instellingen die gebruikt zijn om tussen een DrayTek Vigor 2600 met een Prestige 652H-31 op te zetten. Er wordt verondersteld dat:


Stappen:
  1. Maak met een browser een verbinding met de Vigor.
  2. Controleer het LAN en WAN-adres van de Vigor Vigor: WAN status
  3. Stel de Vigor de PreShared Key (PSK) voor de inkomende verbinding (in dit voorbeeld testtest) en IPSec Security Method op alleen ESP in op Vigor: VPN and Remote Access Setup - VPN IKE / IPSec General Setup
  4. Maak een VPN profiel aan zoals aangegeven op Vigor: VPN and Remote Access Setup - LAN-to-LAN Profile Setup - 1
  5. Vergeet niet de uitgaande PSK in te stellen onder in Vigor: VPN profile Outgoing IKE PreShared Key
  6. De instellingen onder zijn optioneel, Vigor: Advance Vergeet niet op te drukken!
  7. Maak met een browser een verbinding met de router (dit kan natuurlijk ook met Telnet). Controleer het LAN en WAN-adres van de ZyXEL onder Maintenance - System Status
  8. Stel de VPN in op ZyXEL: IPSec Setup (de aan te passen gegevens zijn rood.
  9. Stel de geanvanceerde IKE instellingen in onder de knop input type=button name=button value="Advanced"> op ZyXEL: IKE Setup
    10. . Vergeet niet twee keer op te drukken!
Mocht het niet lukken er staan procedures en tips in het VPN debug document.

1. Vigor
DrayWeb

Router Web Configurator

Setup Main Menu
DrayTek Corp.
  • Model
    		•  : Vigor2600 annex B
  • Firmware Version
    		•  : v2.5
  • Build Date/Time
    		•  : Sat Aug 30 11:31:57.57 2003
  • LAN MAC Address
    		•  : 00-50-7F-06-38-46
        Basic Setup (Setup First)
    >>  Administrator Password Setup
    >>  LAN TCP/IP and DHCP Setup
        Quick Setup
    >>  Internet Access Setup
        Advanced Setup
    >>  Dynamic DNS Setup
    >>  Call Schedule Setup
    >>  NAT Setup
    >>  RADIUS Setup
    >>  Static Route Setup
    >>  IP Filter/Firewall Setup
    >>  VPN and Remote Access Setup
    >>  UPNP Service Setup
        System Management
    >>  Online Status
    >>  VPN Connection Management
    >>  Configuration Backup / Restoration
    >>  SysLog Setup
    >>  Time Setup
    >>  Management Setup
    >>  Diagnostic Tools
    >>  Reboot System
    >>  Firmware Upgrade (TFTP Server)
    Copyright (c) 2002, DrayTek Corp. All Rights Reserved.


    2. Vigor: Online Status
    > System Management> Online Status <<Main Menu
    System Status
    System Uptime: 0:21:7
    LAN Status Primary DNS   62.177.144.11 Secondary DNS   62.177.144.2
    IP Address TX Packets RX Packets
    192.168.2.1666645
    WAN Status GW IP Addr   172.31.31.31
    Mode IP Address TX Packets TX Rate RX Packets RX Rate Up Time
    DHCP Client 172.31.31.46 2 1 166 70 0:20:38
    ADSL Information       (ADSL Firmware Version :  40e3be15)
    ATM Statistics TX Blocks RX Blocks Corrected Blocks Uncorrected Blocks
    5024580 5024373 0 0
    ADSL Status Mode State Up Speed Down Speed SNR Margin Loop Att.
    G.DMT SHOWTIME 896000 8064000 12.5 0.0


    3. Vigor: Online Status
    > Advanced Setup > VPN IKE / IPSec General Setup << Main Menu
    VPN IKE/IPSec General Setup << Back

    Dial-in Set up for Remote Dial-in users and Dynamic IP Client (LAN to LAN).
    IKE Authentication Method
    Pre-Shared Key
    Re-type Pre-Shared Key
    IPSec Security Method
    Medium (AH)
         Data will be authentic, but will not be encrypted.

    High (ESP)         DES    3DES    AES
         Data will be encrypted and authentic.

      


    4. Vigor: VPN and Remote Access Setup - LAN-to-LAN Profile Setup - 1
    > Advanced Setup> LAN-to-LAN Profile Setup <<Main Menu
    Profile Index : 1 <<Back |  Clear | 

    1. Common Settings
      Profile Name
       Enable this profile
      Call Direction Both Dial-Out Dial-In
    Always on
      Idle Timeout     second(s)
    Enable PING to keep alive
      PING to the IP   
    2. Dial-Out Settings
      Type of Server I am calling
    ISDN
    PPTP
    IPSec Tunnel
    L2TP with IPSec Policy

      Server IP/Host Name for VPN.
      (such as draytek.com or 123.45.67.89)
        
      Link Type
      Username
      Password
      PPP Authentication
      VJ Compression On Off
      IPSec Security Method
       Medium(AH)
       High(ESP)
      Scheduler (1-15)
         ,  ,  , 
      Callback Function (CBCP)
       Require Remote to Callback
       Provide ISDN Number to Remote
    3. Dial-In Settings
      Allowed Dial-In Type
    ISDN
    PPTP
    IPSec Tunnel
    L2TP with IPSec Policy

       Specify Remote VPN Gateway
      Peer VPN Server IP
       
      or Peer ID
      Username
      Password
      VJ Compression On Off
      IPSec Security Method
       Medium (AH)
       High (ESP)
             DES    3DES    AES
    4. TCP/IP Network Settings
      My WAN IP
      Remote Gateway IP
      Remote Network IP
      Remote Network Mask
         
      RIP Direction
      RIP Version
      For NAT operation, treat remote sub-net as
      Change default route to this VPN tunnel



    5. VPN: profile Outgoing IKE PreShared Key
    IKE Authentication Method
    Pre-Shared Key
    Re-type Pre-Shared Key



    6. Vigor: Advance
    IKE advance settings
    IKE phase 1 mode Main mode Aggressive mode
    IKE phase 1 proposal
    IKE phase 1 key lifetime (900 ~ 86400)
    IKE phase 2 key lifetime (600 ~ 86400)
    Perfect Foward Secret Disable Enable
    Local ID



    7. ZyXEL: Maintenance - System Status
      
    System Status
    System Status
     
    System Name :
    ZyNOS F/W Version: V3.40(IU.2) | 9/4/2003
    DSL FW Version: Alcatel, Version 3.9.122
    Standard: Multi-Mode
     
     
    WAN Information
     
    IP Address: 172.31.31.43
    IP Subnet Mask: 255.255.255.0
    Default Gateway: 172.31.31.31
    VPI/VCI: 0/ 35
     
     
    LAN Information
     
    MAC Address: 00:a0:c5:56:ac:03
    IP Address: 192.168.1.1
    IP Subnet Mask: 255.255.255.0
    DHCP: Server
    DHCP Start IP: 192.168.1.33
    DHCP Pool Size: 32
     
     



    8. ZyXEL: IPSec Setup
      
    VPN - IKE
    IPSec Setup
      Active Keep Alive
      Name  
      IPSec Key Mode  
      Negotiation Mode  
    Encapsulation Mode  
    DNS Server (for IPSec VPN)  
     
    Local
    Local Address Type  
    IP Address Start  
    End / Subnet Mask  
     
    Remote
    Remote Address Type 
    IP Address Start  
    End / Subnet Mask  
     
    Address Information
    Local ID Type  
    Content  
    My IP Address  
    Peer ID Type  
    Content  
    Secure Gateway Address  
     
    Security Protocol
    VPN Protocol  
    Pre-Shared Key  
    Encryption Algorithm  
    Authentication Algorithm  
      
               



    9. ZyXEL: IKE Setup
      
    VPN - IKE - Advanced Setup
    VPN - IKE
    Protocol
    Enable Replay Detection
    Local Start Port End
    Remote Start Port End
     
    Phase1
    Negotiation Mode
    Pre-Shared Key
    Encryption Algorithm
    Authentication Algorithm
    SA Life Time (Seconds)
    Key Group
     
    Phase2
    Active Protocol
    Encryption Algorithm
    Authentication Algorithm
    SA Life Time (Seconds)
    Encapsulation
    Perfect Forward Secrecy(PFS)