Overview of configuration steps

Licence for IP address transfer over ISDN

Field Menu Value
Licence Serial Number System Management -> Global Settings-> System Licenses -> New Serial number
Licence Key System Management -> Global Settings-> System Licenses -> New Licence Key

ISDN interfaces

Field Menu Value
ISDN Port Physical Interfaces -> ISDN Ports-> MSN Configuration -> New e.g. bri-0
Service Physical Interfaces -> ISDN Ports-> MSN Configuration -> New IPSec
MSN Physical Interfaces -> ISDN Ports-> MSN Configuration -> New e.g. 840
MSN Recognition Physical Interfaces -> ISDN Ports-> MSN Configuration -> New Right to Left
Bearer Service Physical Interfaces -> ISDN Ports-> MSN Configuration -> New Data + Voice

Internet Accesses

Field Menu Value
Description WAN -> Internet + Dialup -> PPPoE -> New e.g. T-Online
PPPoE ethernet interface WAN -> Internet + Dialup -> PPPoE -> New ethoa50-0
User Name WAN -> Internet + Dialup -> PPPoE -> New Your user name, e.g. t-online.de
Password WAN -> Internet + Dialup -> PPPoE -> New Your password
Always on (flat-rate mode) WAN -> Internet + Dialup -> PPPoE -> New Disabled
IP address mode WAN -> Internet + Dialup -> PPPoE -> New Get IP Address
Default Route WAN -> Internet + Dialup -> PPPoE -> New Enabled
Create NAT entry WAN -> Internet + Dialup -> PPPoE -> New Enabled

IPSec Configuration

Field Menu Value
Description VPN -> IPSec ->IPSec Peers -> New e.g. rs232bw_branchoffice
Peer ID VPN -> IPSec ->IPSec Peers -> New e.g. IPV4 Address and 192.168.0.254
Preshared Key VPN -> IPSec ->IPSec Peers -> New e.g. secret123
Default Route VPN -> IPSec ->IPSec Peers -> New Disabled
Local IP Address VPN -> IPSec ->IPSec Peers -> New e.g. 192.168.1.254
Route Entries VPN -> IPSec ->IPSec Peers -> New e.g. for IP Address 192.168.0.0 and for Netmask 255.255.255.0
Mode VPN -> IPSec ->IPSec Peers-> New -> Advanced Settings Both
Incoming ISDN Number VPN -> IPSec ->IPSec Peers-> New -> Advanced Settings e.g. 850
Outgoing ISDN Number VPN -> IPSec ->IPSec Peers-> New -> Advanced Settings e.g. 850
Transfer own IP address over ISDN VPN -> IPSec ->IPSec Peers-> New -> Advanced Settings Enabled
Transfer Mode VPN -> IPSec ->IPSec Peers-> New -> Advanced Settings e.g. Autodetect Best Mode
Description VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. Phase1 PSK
Proposal VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. 3DES and SHA1
DH Group VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. 2(1024 Bit)
Lifetime VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. 28800 and 0
Authentication Method VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> Preshared Keys
Mode VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> Aggressive
Local ID Type VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. IPV4 Address
Local ID Value VPN -> IPSec -> Phase-1 Profiles-> <Multi-Proposal> -> e.g. 192.168.1.254
Alive Check VPN -> IPSec ->Phase-1 Profiles -> <Multi-Proposal> -> -> Advanced Settings Inactive
NAT Traversal VPN -> IPSec ->Phase-1 Profiles -> <Multi-Proposal> -> -> Advanced Settings Disabled
Description VPN -> IPSec -> Phase-2 Profiles-> <Multi-Proposal> -> e.g. Phase2
Proposal VPN -> IPSec -> Phase-2 Profiles-> <Multi-Proposal> -> e.g. 3DES and SHA1
Use PFS Group VPN -> IPSec -> Phase-2 Profiles-> <Multi-Proposal> -> Enabled
Lifetime VPN -> IPSec -> Phase-2 Profiles-> <Multi-Proposal> -> e.g. 3600 and 0
Alive Check VPN -> IPSec ->Phase-2 Profiles -> <Multi-Proposal> -> -> Advanced Settings Disabled
Propagate PMTU VPN -> IPSec ->Phase-2 Profiles -> <Multi-Proposal> -> -> Advanced Settings Disabled

Copyright© Version 01/2020 bintec elmeg GmbH