Local Services -> DynDNS Client -> DynDNS Update -> New
Configuration on the first router (Location A) |
A list of all configured DynDNS registrations is displayed in the DynDNS Update menu. Select the New button to perform additional DynDNS registrations.
Go to Local Services -> DynDNS Client -> DynDNS Update -> New.
Local Services -> DynDNS Client -> DynDNS Update -> New
Proceed as follows:
Under Host Name enter the complete host name as registered with the DynDNS provider, e.g. test1.dyndns.org .
Select the WAN Interface whose IP address is to be propagated over the DynDNS service (e.g. DSL ISP , the interface of the Internet Service Provider).
Enter the User Name as registered with the DynDNS provider.
Enter the Password as registered with the DynDNS provider.
Select the DynDNS Provider with which the above data is registered.
Activate the function Enable update, the DynDNS entry configured here will be activated.
Confirm with OK.
An endpoint of a communication is defined as peer in a computer network.
Select the New button to set up a new IPSec peer.
Go to VPN -> IPSec -> IPSec Peers -> New.
VPN -> IPSec -> IPSec Peers -> New
Proceed as follows to make the settings in the IPSec peer:
Set Administrative Status to Active. The peer is available for setting up a tunnel immediately after saving the configuration.
Enter a Description of the peer that identifies it.
Indicate the remote Peer Address (here, the DynDNS account of the bintec be.IP).
The Peer ID must match the Local ID value of the remote terminal. Select Full Qualified Domain Name (FQDN) and enter an identification for the partner, e.g. be.IP_test2 .
Under Preshared Key enter the password for the encrypted connection.
For IPv4 Address Assignment, select Static .
Deselect the Default Route option.
The Local IP Address is the IP address of the router LAN interface.
Under Remote IP Address enter the partner network to be reached, e.g. 192.168.200.0 and under Netmask enter 255.255.255.0 .
Press OK to confirm your entries.
In the
Phase-1 Profiles menu, you can define the Phase 1 (IKE) settings. Click on the
icon to edit existing entries. Select the
New button to create new profiles.
Go to VPN -> IPSec -> Phase-1 Profiles -> New.
VPN -> IPSec -> Phase-1 Profiles -> New
Proceed as follows:
Enter a Description that uniquely defines the type of rule.
Under Proposal Encryption select Blowfish , under Authentication select MD5 . Since at least one proposal must be configured at any one time, the first entry in the list is enabled by default.
Under DH Group select 2 (1024 Bit).
Create a Lifetime for phase 1 keys. For lifetime, enter 900 seconds. For lifetime as volume of processing data, enter 0 KByts.
Select the Authentication method Preshared Keys .
Set the Mode to Aggressive as you use dynamic IP addresses.
Under Local ID Type choose Fully Qualified Domain Name (FQDN) .
Under Local ID Value enter the local ID of the gateway, e.g. be.IP_test1 (set under Peer ID for the Partner).
Click Advanced Settings.
Under Alive Check select Dead Peer Detection (idle).
Define under Block Time how long a peer is blocked for tunnel setups after a phase 1 tunnel setup has failed.
Leave NAT Traversal on Enabled.
Confirm with OK.
You can define profiles for phase 2 of the tunnel setup just as for phase 1. Click on the
icon to edit existing entries. Select the
New button to create new profiles.
Go to VPN-> IPSec -> Phase-2 Profiles -> New.
VPN -> IPSec -> Phase-2 Profiles -> New
Proceed as follows:
Enter a Description that uniquely identifies the profile.
Under Proposal Encryption select Blowfish , under Authentication select MD5 . Since at least one proposal must be configured at any one time, the first entry in the list is enabled by default.
Activate the Use PFS group option and select 2 (1024 bits) .
Define how the Lifetime is defined that will expire before phase 2 SAs need to be renewed. For lifetime, enter 900 seconds. For lifetime as volume of processing data, enter 0 KByts.
Click Advanced Settings.
Set Alive Check to Heartbeats (send & expect) .
Aktivate the option Propagate PMTU.
Confirm with OK.
| Copyright© Version 08/2020 bintec elmeg GmbH |