
Multi-Tech Systems, Inc.
RF550VPN/RF560VPN Reference Guide – Setup Examples 24
k) Encryption Protocol – Select the encryption protocol used for your configuration. The default
protocol for the RF550VPN/RF560VPN communicating with another RF550VPN/RF560VPN is
3DES. (Ex: 3DES)
l)
PreShared Key – Enter the PreShared Key name (you can enter an alphanumeric name but it
needs to match the security code for the RouteFinder at Site A. (Ex: 1o2t3t4f).
m)
Key Life – Enter the amount of time that tells the router to renegotiate the Key. For example,
3600 seconds is 60 minutes.
n)
IKE Life Time – Enter the amount of time that tells the router to renegotiate the IKE security
association. For example, 28800 seconds is 8 hours.
14b. The VPN Settings screen for entering specific VPN settings will display. The screen pictured below
assumes Manual is selected as the Secure Association. The Connection Name (SiteBtoA)
defaults into the first field. Continue to enter the following settings:
Note: If Secure Association is set to Manual, the two RF550VPN/RF560VPNs must
communicate with Static IP addresses at both ends.
Note: Enter all data for a) through h) as illustrated above. Then
i)
Secure Association – Selecting Manual instead of IKE will set how inbound packets will be
filtered. Selecting Manual displays the following fields
j)
Incoming SPI – Enter the incoming SPI that the remote VPN at Site B will use to identify this
Security Association. Enter a three-digit number between 100 and 400. This value must
match the outgoing SPI value entered at the remote VPN gateway at Site A. (Ex: 100)
k)
Outgoing SPI – Enter the outgoing SPI that the Site B VPN gateway will use to identify this
Security Association. Enter a three-digit number between 100 and 400. This value must
match the incoming SPI value entered at the remote VPN gateway at Site A. (Ex: 400)
l)
Encryption Protocol – Select an appropriate encryption algorithm: Null, DES, 3DES. 3DES
is the recommended choice.
m)
Encryption Key – Enter a string of characters to be used to encrypt and decrypt transmitted
data between the two VPNs. The string is made up of 8-16 alphanumeric characters and
needs to match the Encryption Key for the RouteFinder at Site A. (Ex: 1o2t3t4f)
n)
Authentication Protocol – Select an appropriate authentication algorithm: MD5 or SHA-1.
MD5 is the recommended choice.
o)
Authentication Key – Enter a string of characters to be used as a key for authentication
between the two VPNs. The string is similar to a password and is made up of 8-16
alphanumeric characters and needs to match the Authentication Key for the VPN at Site A.
(Ex: 1234567890az)
15. Once the VPN settings are entered, click on the Save button, the Connection Name will display on
the lower half of the screen and on the initial VPN Settings screen. You can enable/disable, edit, or
delete this connection by clicking the corresponding buttons. To enable this connection, check the
Enable box that appears to the left of the connection name.
Note: If you uncheck the Enable box, the parameters will remain in the table for you to
enable/disable, edit, or delete at any time.
Comentarios a estos manuales