MH-5001 User Manual
Chapter 13
Virtual Private Network – IPSec
100
Same
“Local Address” means the local LAN subnet; “Remote Address” means the remote LAN subnet; “My IP
Address” means the WAN IP address of the local VPN gateway while the “Peer’s IP Address” means the
WAN IP address of the other VPN gateway.
Difference
The “Pre-Shared Key” must be the same at both
MH-5001s.
The types and keys of “Encryption” and “Authenticate”
must be set the same on both MH-5001s. However, the
“Outgoing SPI” at WALL-1 must equal to “Incoming
SPI” at WALL-2, and the “Outgoing SPI” at WALL-2
must equal to “Incoming SPI” at WALL-1.
Table 13-1 Compared IKE and Manual Key methods
13.4 Steps
In the following we will separately explain the ways to set up a secure DES/MD5 tunnel with IKE and Manual key.
¾
DES/MD5 IPSec tunnel: the IKE way
At WALL-1:
At the first, we will install the IPSec properties of WALL-1.
Step 1.
Enable IPSec
Check the
Enable IPSec
checkbox and click
Apply
.
ADVANCED SETTINGS > VPN Settings > IPSec