Setup IPSec Tunnel - TD-W8960N/TD-W8950ND

VPN TD-W8960N/TD-W8950ND

Suitable for: TD-W8950ND, TD-W8960N

This article illustrates a configuration instance for building an IPSec VPN tunnel between two units of TD-W8960N/TD-W8950ND.

If you have only one unit and you want to setup a client to site VPN connection. This FAQ is not available for you and the TD-W8950ND/TD-W8960N has no such function to meet your need. They can´t work as a VPNserver.

 

IPSec tunnel is usually built to connect two or more remote LANs via Internet so that hosts in different remote LANs are able to communicate with each other as if they are all in the same LAN. For more details about VPNtunnel please refer to Wikipedia.

Figure 1 Configuration Instance

Here are step by step instructions for your reference (the following steps are based on Figure 1):

Configuration on Site A

1.    Login to the management page of TD-W8960N/TD-W8950ND. If you are not sure how to enter the management page, please click here for details.

2.    On the left menu of the management page, please click Advanced Setup and then click IPSec.

3.    On the IPSec main page, please click Add New Connection.

4.    On the IPSec configuration page, please do configuration as follows:

IPSec Connection Name: Define a name for this connection;

Remote IPSec Gateway Address: Input he WAN IP address of site B;

Site A

Tunnel access from local IP addresses: For a whole LAN please select Subnet; for a single host please selectSingle Address. In this instance we select Subnet;

IP Address for VPN: Input the LAN IP range of site A. In this instance, we should input 192.168.1.0;

IP Subnetmask: Input the LAN subnet mask of site A. In this instance, we should input 255.255.255.0;

Site B

Tunnel access from remote IP addresses: For a whole LAN please select Subnet; for a single host please select Single Address. In this instance we select Subnet;

IP Address for VPN: Input the LAN IP range of site B. In this instance, we should input 192.168.2.0;

IP Subnetmask: Input the LAN subnet mask of site B. In this instance, we should input 255.255.255.0;

5.    Leave other settings as the default value and click Save/Apply.

Configuration on Site B

1.    Log onto the management page of TD-W8960N/TD-W8950ND.

2.    On the left menu of the management page, please click Advanced Setup and then click IPSec.

3.    On the IPSec main page, please click Add New Connection.

4.    On the IPSec configuration page, please do configuration as follows:

IPSec Connection Name: Define a name for this connection;

Remote IPSec Gateway Address: Input he WAN IP address of site B;

Site A

Tunnel access from local IP addresses: For a whole LAN please select Subnet; for a single host please selectSingle Address. In this instance we select Subnet;

IP Address for VPN: Input the LAN IP range of site B. In this instance, we should input 192.168.2.0;

IP Subnetmask: Input the LAN subnet mask of site B. In this instance, we should input 255.255.255.0;

Site B

Tunnel access from remote IP addresses: For a whole LAN please select Subnet; for a single host please select Single Address. In this instance we select Subnet;

IP Address for VPN: Input the LAN IP range of site A. In this instance, we should input 192.168.1.0;

IP Subnetmask: Input the LAN subnet mask of site A. In this instance, we should input 255.255.255.0;

5.    Leave other settings as the default value and click Save/Apply.

Check the IPSec Connection

1.    On the host in LAN1, press [Windows Logo] + [R] to open Run dialog. Input “cmd” and hit OK.

2.    In the CLI window, type in “ping 192.168.2.x” (“192.168.2.x” can be IP address of any host in LAN2). Then press [Enter].

If Ping proceeds successfully (gets replies from host in LAN2), the IPSec connection must be working properly now.

Here until, all basic configuration required for an IPSec tunnel is completed. If one of the site has been off line for a while, for example, if Site A has been disconnected, on Site B you need to click Disable and then click Enable after Site A back on line in order to re-establish the IPSec tunnel.

If there are any further problems, please click here to contact TP-LINK technical support.

Fonte: http://www.tp-link.com/ca/article/?faqid=244