to use the ipsec features of the fvm318, you must have vpn client software installed on your pc. the safenet softremote basic vpn client software included on the fvm318 resource cd provides a simple and very easy way to set up wireless vpn connections to the fvm318. however, it only works with fvm318 wireless connections.
if you prefer the flexibility of using one vpn client software program for both your local wireless connections and remote vpn connections, then you should consider the softremotelt client which lets you pick from multiple configurations, depending on whether you are connecting over a local wireless link to the fvm318 or remotely over the internet. instructions for configuring the softremote softremotelt for local wireless vpn connections to the fvm318 can be found at “using softremotelt instead of softremote basic” on page 3-17. instructions for configuring the softremote softremotelt for remote vpn connections over the internet to the fvm318 can be found at “pc to lan vpn access from a pc to an fvm318” on page 5-9.
procedure 3-4: configure basic ipsec wireless connections
the safenet softremote basic vpn client installer program is on the fvm318 resource cd. observe the following guidelines when using the safenet softremote basic vpn client:
1 the softremote basic client requires windows 95 or later.
2 the softremote basic client may not be compatible with other vpn clients. in this case you must uninstall the other client before installing softremote basic.
3 if your pc will also be used for remote vpn connections, you should use the full version of safenet softremote, not the basic version.
1.configure the fvm318 settings.
a.log in to the fvm318 at http://192.168.0.1 with its default user name of admin and default password of password, or using whatever user name, password you have set up.
b.click the wireless link in the main menu setup section to display the menu shown below.
c.click the encryption strength drop-down list box and select ipsec. the wireless settings menu will change to display the list of ipsec connections, as shown in figure 3-13:
d.click add to display the ipsec client setting menu, as shown below.
e.enter a descriptive name for this pc in connection name. this name is for your convenience only, and is not used in the vpn negotiation.
f.enter the user name. an email address is an easy to remember user name.
g.enter a pre-shared key value for this connection.
h.use the default aggressive mode and aes - 256 settings.
2.install the safenet softremote basic vpn client software.
before installing the safenet softremote basic vpn client software, be sure to turn off any virus protection or firewall software you may be running on your pc.
a.place the fvm318 resource cd in your cd drive.
if the cd does not autostart, double click on the index.htm file on the cd.
b.install the safenet softremote basic vpn client.
after installation, a safenet icon shown below will appear in the taskbar tray of your pc.
at this point, the safenet icon has a diagonal red bar through it, indicating that the vpn client is currently disabled.
3.configure the softremote basic vpn client.
a.in the taskbar tray, right-click on the safenet icon and select edit security policy in the vpn client task menu, as shown below.
the vpn client security policy menu will appear as shown below.
b.in most cases, you can leave the ipsec gateway as “lan gateway”, which indicates the firewall. if you are not using the firewall as your network’s default gateway, change ipsec gateway to indicate either the ip address or the network name of the firewall.
c.enter the user name and the pre-shared key value that you programmed for this pc in the firewall’s ipsec client settings menu.
d.click ok.
e.in the taskbar tray, right-click on the safenet icon and select activate security policy in the task menu. the safenet icon will now appear without the red bar, as shown below.
figure 3-18.safenet system tray icon showing enabled condition
4.test the softremote basic vpn connection.
to check the vpn connection, you can initiate a request from the pc to the firewall. the simplest method is to ping from the pc to the firewall, as shown below:
a.on the windows taskbar, click the start button, and then click run.
b.type ping -t 192.168.0.1 , and then click ok.
figure 3-19.run ping from windows start menu
this will cause a continuous ping to be sent to the firewall. within thirty seconds, the ping response should change from timed out to reply.
figure 3-20.ping results
at this point, the safenet tray icon should change to read on as shown below:
figure 3-21.safenet system tray icon showing on condition
c.once the connection is established, you can open the browser of the pc and browse.
to view the firewall’s connection log, go to the router status menu and click on wireless vpn log. the vpn client’s log is written to the text file isakmp.log, which can be found in the directory in which the client is installed. typically that directory is:
c:\program files\safenet\softremotebasic
help is also available by right-clicking on the safenet taskbar icon and selecting help.