Page 2 - Revision History; Date; John Yoong; Objective; The table below shows the devices information.
D-Link International Confidential and proprietary 2 Revision History Date Rev. Description Editor 2009-4-24 1.0 Interoperability Compliance Testing Negotiate mode for Phase1 and Phase2 using TheGreenBow VPN Client and D-Link product’s Wireless VPN router DI-824VUP. John Yoong 1. Introduction The obj...
Page 3 - Network Diagram; The steps in this configuration are:; Setup Dynamic VPN
D-Link International Confidential and proprietary 3 5. Network Diagram Note: DI-824VUP+ Router is set to allow IPSec pass through. It is important to note that this application note is also applicable to the following VPN routers: • DI-804HV • DI-808HV • DI-824VUP • DI-824VUP+ 6. Configurations In t...
Page 4 - Setup Phase 1; Click on the “; VPN; ” and select the “; Dynamic VPN; all other VPN setting is clear or disable.
D-Link International Confidential and proprietary 4 • Setup Phase 1 • Setup Phase 2 6.1.1) Setup DI-824VUP+ for VPN tunneling 6.1.1.1) Setup Dynamic VPN 1) Click on the “ VPN ” and select the “ Dynamic VPN ”, please ensure all other VPN setting is clear or disable.
Page 5 - Preshare key; Fill in the setting and s; Encrypt
D-Link International Confidential and proprietary 5 2) Fill in the details as show below and for the “ Preshare key ” must be the same as the preshare key set in Thegreenbow VPN Client software. Next click on “ IKE Proposal ” 3) Fill in the setting and s elect the “ Encrypt ” and “ Auth ” algorithm ...
Page 6 - Lastly is to set the “; IPSec Proposal
D-Link International Confidential and proprietary 6 4) Lastly is to set the “ IPSec Proposal ”, add the profile to active it.
Page 7 - Right click on the “; Root; ” to add a new “
D-Link International Confidential and proprietary 7 6.1.2) Setup TheGreenBow VPN Client software 6.1.2.1) Setup Phase 1 1) Right click on the “ Root ” to add a new “ Phase1 ”, next fill in the IP address for this VPN Client and Remote gateway IP follow by Preshared Key and IKE setting.
Page 8 - Setup Phase 2
D-Link International Confidential and proprietary 8 Note: the Preshared Key and IKE must be the same setting set in the Wireless VPN router DI-824VUP+. 6.1.2.2) Setup Phase 2 1) Right click on the “ Phase1 ” to add a new “ Phase2 ”, next fill in the VPN Client address for this VPN Client and Remote ...
Page 9 - General Test Approach
D-Link International Confidential and proprietary 9 Note: the ESP Encryption and Authentication setting must be the same in the Wireless VPN router DI-824VUP+ IKE and IPSec setting. 7. Interoperability Compliance Testing 7.1) General Test Approach
Page 11 - Result; TheGreenBow
D-Link International Confidential and proprietary 11 Series Negotiate Mode Phase 1 Phase 2 3DES-SHA DES-MD5 DES-MD5 DES-MD5 DES-SHA DES-MD5 7.2) Test Result a. The VPN tunnel will be open at any negotiate mode set in Phase 1 and Phase 2. TheGreenBow VPN Software
Page 12 - Client is able to Ping to the remote network.
D-Link International Confidential and proprietary 12 b. The Wireless VPN Router DI-824VUP+ will show the tunnel is up at their VPN status. DI-824VUP+ VPN status c. VPN Client is able to Ping to the remote network.