Doc.Ref tgbvpn_ug_ipcop_en Doc.version 1.0 - Oct 2007 VPN version 4.x IPSec VPN Router Configuration … firewall downloadable from http://www.ipcop.org This document is not a tutorial about … Property of TheGreenBow Sistech SA - © Sistech 2001-2007 3/17 1 Introduction 1.1 Goal of this document This configuration guide describes how to configure TheGreenBow IPSec VPN Client with a free Linux distribution firewall downloadable from http://www.ipcop.org a free Linux distribution firewall downloadable from http://www.ipcop.org This …

3.2 VPN Client Phase 2 Configuration Create a Phase2 by right-clicking on Phase1: Modify Address type by choosing subnet address, and add the remote LAN address and mask (must match what was defined on IPCop) Algorithms, PFS and DH group must match IPCop settings in advanced screen in section 2.2 of this document. The VPN Client address must not belong to the remote subnet range. In our example, we chose 0.0.0.0 meaning the VPN Client address is the physical address of the machine dynamically assigned by ISP (from a hotel for example). If the roadwarrior tries to connect from a LAN which address is 172.16.0.0, the VPN tunnel won’t establish correctly. In this case you must specify an IP address in another range (10.0.0.1 for example, or 192.168.0.1 or whatever private IP address you wish) Phase2 advanced is used to enter alternate DNS and/or wins servers addresses from the ones the VPN Client is using prior to establish the tunnel.

Download VPN Router Configuration Guide.Pdf