CradlePoint to Adtran NetVanta VPN Setup Example

Transcription

1 CradlePoint to Adtran NetVanta VPN Setup Example Quick Links - Summary - Configuration Summary This document will guide you through creating an IPsec VPN tunnel between a Series 3 CradlePoint router and an Adtran NetVanta 3120 router. The IPsec tunnel in this example assumes that the WAN sources attached to both routers are publicly routable and not behind a NAT. Configuration Configuration Difficulty: Intermediate Configuring the CradlePoint: - Step 1: Log into the router's Setup Page. For help with logging in please click here. - Step 2: Click on Internet and select VPN Tunnels from the drop-down menu. - Step 3: Click the Addbutton to create a new IPsec Tunnel Policy.

2 - Step 4: Give the tunnel a name for easy identification. - Step 5: Enter CradlePoint as the Local Identity - Step 6: Enter NetVanta3120 as the Remote Identity. - Step 7: Enter a Pre-Shared Key. - Step 8: The Initiation Mode may be set to On Demand or Always On depending upon your needs. - Step 9: Click Next to continue. - Step 10: Enter the CradlePoint's local network address and netmask for the network(s) that will be made available across the VPN into the Local Networks section. - Step 11: Click Next to continue.

3 - Step 12: Enter the Public IP Address (or hostname if applicable) of the WAN Interface of the NetVanta into the Remote Gateway field. - Step 13: Enter the NetVanta's local network address and netmask for the network(s) that will be made available across the VPN into the Remote Networks section. - Step 14: Click Next to continue.

4 - Step 15: For IKE Phase 1, ensure the settings match those set in the NetVanta. - Note: The settings used here are up to you, the only requirement is that they match on both the CradlePoint and NetVanta. This applies for both Step 14 and Step Step 16: Click Next to continue. - Step 17: For IKE Phase 2, again ensure the settings match those set in the NetVanta. - Step 18: Click Next to continue. - Step 19: For Dead Peer Detection leave the default settings. - Step 20: Click Finish to review your settings.

5 - Step 21: Verify the settings in the Tunnel Summary are accurate. - Step 22: Click Yes to finalize your settings and continue.

6 - Step 23: At the VPN tunnels page you will now see your new IPsec Policy listed. - Step 24: Click Enable VPN Service to start the VPN service on the CradlePoint. Configuring the Adtran NetVanta: - Step 1: Log into the Adtran's setup pages. - Step 2: Click the Data tab. - Step 3: Under VPN click on VPN Wizard. - Step 4: At the wizards welcome page, click Next to continue.

7 - Step 5: Select Typical Settings. - Step 6: Click Next to continue. - Step 7: In the VPN Peer Description field, enter a name for the remote CradlePoint. - Step 8: Click Next to continue. - Step 9: Select the Adtran's public WAN interface in the Public Interface field. - Step 10: Click Next to continue.

8 - Step 11: Enter the CradlePoint's WAN IP in the Peer IP Address field. - Step 12: Click Next to continue. - Step 13: Enter the CradlePoint's local network address and netmask for the network(s) that will be made available across the VPN into the Remote Subnet and Remote Subnet Mask fields respectively. - Step 14: Click Next to continue. - Step 15: Enter the Adtran's local network address and netmask for the network(s) that will be made available across the VPN into the Local Networks section by either selecting it from the Use Network from field or by manually entering it. - Step 16: Click Next to continue.

9 - Step 17: Enter the Pre-Shared Secret. - Note: This should match the Pre-Shared Key from Step 7 of the CradlePoint configuration. - Step 18: Click Next to continue. - Step 19: For the Remote ID Type field choose Allow Any Remote ID. - Note: It is also possible to use an address or IP address in this field if preffered, as long as both sides match. If you use an option other than Allow Any Remote ID for this field, it will need to match the Local Identity value from Step 5 of the CradlePoint configuration. - Step 20: Click Next to continue.

10 - Step 21: For the Local ID Type field choose Domain Name. Leave the Local ID Value at the default value. - Note: The Local ID Value should match the Remote Identity value from Step 6 of the CradlePoint configuration. - Step 22: Click Next to continue. - Step 23: On the Confirm Settings page take note of the IKE & IPsec settings that the Netvanta selected by default. These will need to match those set in the CradlePoint's configuration in Steps 17 and Note: If these do not match, edit the CradlePoint's configuration to match those selected by the NetVanta. the IKE Paramaters settings should match the IKE Phase 1 settings from Step 17 of the CradlePoint configuration and the IPsec Paramaters settings should match the IKE Phase 2 settings from Step 19 of the CradlePoint configuration.

11 - Step 24: At the Wizard Complete page, click Exit to return to the main Netvanta UI.