Download - NetComm Wireless

NetComm Wireless
VPN Functionality
Feature Spotlight
What is a VPN?
A virtual private network (VPN) is a secure connection
between two or more endpoints on a network.
There are two types of VPN scenarios:
Site to site VPN where data is encrypted from one VPN
gateway to another over a third party network such as the
internet
Remote Access VPN where a secure connection is
established between an individual computer and a VPN
gateway.
NetComm Wireless routers support the following VPN
protocols:
IPSec
OpenVPN
PPTP
GRE
IPSec
IPSec is a VPN protocol operating at the internet protocol (IP) layer of the internet protocol suite.
It can be used to secure data flow in the following configurations:
Host-to-host
Network-to-network
Network-to-host
OpenVPN
OpenVPN is an open source virtual private network program for creating point-to-point or server-tomulti-client encrypted tunnels between host computers.
It can traverse network address translation (NAT) and firewalls and provides 3 methods of
authentication:
Certificate
Pre-shared key
Username/password
PPPoE username and password
PPTP-Client
The Point-to-Point Tunnelling Protocol (PPTP) is a method for implementing virtual private networks
using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the OSI
model and is included on Windows computers.
GRE
The Generic Route Encapsulation (GRE) protocol is used in addition to Point-to-Point Tunnelling
Protocol (PPTP) to create VPNs (virtual private networks) between clients and servers or between
clients only. Once a PPTP control session establishes the VPN tunnel GRE is used to encapsulate
the data or payload.
What can you do with VPNs?
The benefits of using a VPN include:
Security – All traffic in and out of the router is encrypted (except when using GRE) ensuring the
integrity of your network.
Common network – the devices can be placed in the same subnet meaning that they can be more
easily administered.
Anonymity – because the router is connecting to a VPN gateway, any remote connections it may
make appear to come from the gateway.
Reduce maintenance costs and time – when you have multiple routers on the same network, you
can save time and money by reducing the effort required to service them.
Configuring an IPSec VPN
Configuring an IPSec VPN (continued)
Select encapsulation, encryption and hash types
Configuring an IPSec VPN (continued)
Enter Dead peer detection keep alive time and
timeout, re-key interval, SA life time and then
select the key mode.
Configuring an OpenVPN server
Configuring an OpenVPN server
Enter the server details. All fields are required.
When all fields have been completed, click Generate
CA certificate button
Configuring an OpenVPN server
If using certificate authentication, enter the details
for at least one certificate and click Generate.
After its generated, you can use the Download
button to download the certificate file.
Certificates may be revoked in the future if they are
no longer necessary or security has been
compromised.
Enter the remote network address and
network mask if you know them.
Click the Save button to save your settings.
Configuring an OpenVPN client
Configuring an OpenVPN client (continued)
To use certificate authentication, scroll to
the bottom of the screen and use this
section to upload the certificate first.
Configuring an OpenVPN client
Select uploaded certificate from drop
down list.
Certificate information is displayed.
Click the Save button when finished.
Configuring an OpenVPN P2P connection
Configuring an OpenVPN P2P connection (continued)
Enter the remote network IP address and
subnet mask
Configuring an OpenVPN P2P connection (continued)
On both server and client sides, click the
Generate button to create a secret key to be
shared with the other router.
Use the Client secret key upload field to upload
the secret key file from the other router.
Configuring a PPTP-Client connection
Configuring a PPTP-Client connection (continued)
Configuring a PPTP-Client connection (continued)
Further information
For more information, please visit www.netcommwireless.com and navigate to your product’s support page.