Stimmen - 0, Durchschnittliche Bewertung: 0
(
)
)
|
Anleitung Zusammenfassung
There are two ways to deactivate a VPN tunnel: • Policy table on VPN Policies page • VPN Status page Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 Using the Policy Table on the VPN Policies Page to Deactivate a VPN Tunnel To use the VPN Policies page to deactivate a VPN tunnel, perform the following steps: 1. Log in to the Modem Router. 2. Open the DG834 v3 management interface and click on VPN Policies to get the VPN Policies screen (Figure 6-38). Figure 6-37 3. Clear the Enable check box for the VPN tunnel you want to deactivate and click Apply. (To reactivate the tunnel, check the Enable box and click Apply.) Using the VPN Status Page to Deactivate a VPN Tunnel To use the VPN Status page to deactivate a VPN tunnel, perform the following steps: 1. Log in to the Modem Router. Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 2. Open the DG834 v3 management interface and click on VPN Status to get the VPN Status/Log screen (Figure 6-38). Figure 6-38 3. Click VPN Status (Figure 6-38) to get the Current VPN Tunnels (SAs) screen (Figure 6-39). Click Drop for the VPN tunnel you want to deactivate. Figure 6-39 Deleting a VPN Tunnel To delete a VPN tunnel: Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 1. Log in to the Modem Router. 2. Open the DG834 v3 management interface and click VPN Policies to display the VPN Policies screen (Figure 6-40). Select the radio button for the VPN tunnel to be deleted and click the Delete button. Figure 6-40 Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 How to Set Up VPN Tunnels in Special Circumstances When the VPN Wizard and its VPNC defaults (see Table 6-2) are not appropriate for your special circumstances, use one of the following alternatives: • Auto Policy—for a typical automated Internet Key Exchange (IKE) setup, see “Using Auto Policy to Configure VPN Tunnels” on page 6-36. Auto Policy uses the IKE protocol to define the authentication scheme and automatically generate the encryption keys. • Manual Policy—for a Manual Keying setup in which you must specify each phase of the connection, see “Using Manual Policy to Configure VPN Tunnels” on page 6-46. Manual Policy does not use IKE. Rather, you manually enter all the authentication and key parameters. You have more control over the process, however the process is more complex and there are more opportunities for errors or configuration mismatches between your DG834 v3 and the corresponding VPN endpoint gateway or client workstation. Using Auto Policy to Configure VPN Tunnels You need to configure matching VPN settings on both VPN endpoints. The outbound VPN settings on one end must match to the inbound VPN settings on other end, and vice versa. See “Example of Using Auto Policy” on page 6-41 for an example of using Auto Policy. Configuring VPN Network Connection Parameters All VPN tunnels on the DG834 ADSL Modem Router require configuring several network parameters. This section describes those parameters and how to access them. The most common configuration scenarios will use IKE to manage the authentication and encryption keys. The IKE protocol performs negotiations between the two VPN endpoints to automatically generate and update the required encryption parameters. Click the VPN Policies link of the main menu, and then click the Add Auto Policy button to display the VPN - Auto Policy menu shown in Figure 6-41. Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 Figure 6-41 Virtual Private Networking (Advanced Feature) v1.1, October 2006 Reference Manual for the ADSL Modem Router DG834 v3 The DG834 v3 VPN tunnel network connection fields are defined as follows: General. These settings identify this policy and determine its major characteristics. • Policy Name—Enter a unique name to identify this policy. This name is not supplied to the remote VPN endpoint. It is used only to help you manage the policies. • Remote VPN Endpoint—If the remote endpoint has a dynamic IP address, select "Dynamic IP address". No "Address Data" input is required. You can set up multiple remote dynamic IP policies, but only one such policy can be enabled at a time. Otherwise, select the desired option (IP address or Domain Name) and enter the address of the remote VPN endpoint to which you wish to connect. Note: The remote VPN endpoint must have this VPN Gateway's address entered as its "Remote VPN Endpoint". • IKE Keep-alive—Enable this if you wish to ensure that a connection is kept open, or, if that is not possible, that it is quickly re-established when disconnected. The Ping IP Address must be associated with the remote endpoint. The remote LAN address must be used. This IP address will be "pinged" peri...