Application Note. Applies to MultiMax

Transcription

1 Application Note Setup L2TP VPN Environment Applies to MultiMax Document Name: Application Note Version: / Date: Updates between document versions are cumulative. Therefore, the latest document version contains all updates made to previous versions. Release Date Firmware Version Details First Release Page 1

2 Requests for corrections or amendments to this application note are welcome and should be addressed to: Requests for new application notes can be sent to the same address. Page 2

3 Contents Chapter 1. Introduction Overview Objective Parts Used Application Diagram Notes for MaxWAN or other private IP WAN usage Notes on site to site (Multimax to Multimax) tunnels... 6 Chapter 2. Configuration for topology Configuring the Cisco 2811 Router about L2TP Configuring the MULTIMAX about L2TP VPN Start Testing... 9 Chapter 3. Configuration for topology Configuring L2TP VPN in MULTIMAX Configuring the PC client Start Testing Page 3

4 Chapter 1. Introduction 1.1 Overview The principle and configuration method of the PPTP and L2tp are very similar. L2TP agreement was drafted by IETF, Microsoft, Ascend, Cisco, 3 com and other companies to participate in the formulation of layer 2 tunnelling protocol, which is based on Microsoft's point to point tunnelling protocol (the PPTP) and Cisco forward layer 2 protocol (L2F). The VPN can be used by the Internet service provider and the company through the Internet. In this application note, we will show you how to configure and test the L2TP VPN which establish between MultiMax and Cisco 2811 Router or between Multimax and PC. Since one is L2TP server and other L2TP client, you can use the information provided to assist in setting up a site to site tunnel directly between two MultiMaxes. 1.2 Objective To help users to setup a L2TP VPN test environment for MULTIMAX. 1. Learn how to configure the L2TP VPN of MULTIMAX with web page. 2. Learn how to establish L2TP VPN by PC dial. 3. Test and verify the connection of L2TP VPN. 1.3 Parts Used Hardware requirement: Maxon MULTIMAX router SIM card to insert in MULTIMAX PC Software requirement: Web browser System requirement: Windows 7 (32/64), Windows Vista (32/64), Windows 2008 (32/64), Windows 2003 (32/64), Windows 2000, Windows XP (32/64) Page 4

5 1.4 Application Diagram TOPOLOGY 1:MULTIMAX to Cisco 2811 Router 1. Cisco 2811 Router run as a border Router in enterprise which has fixed public IP address or domain name; 2. MULTIMAX works on wireless network with any kind of IP which can access internet and ping the WAN IP address of Cisco 2811 Router successfully; 3. L2TP VPN established between Cisco 2811 Router and MULTIMAX. TOPOLOGY 2: MULTIMAX to window OS 1. MULTIMAX run as a border Router which has fixed public IP address or domain name; 2. The PC can access Internet with any kind of IP and ping the WAN IP address of MULTIMAX successfully; 3. L2TP VPN established between MULTIMAX and PC, then the PC could ping the LAN side of MULTIMAX successfully. Page 5

6 1.5 Notes for MaxWAN or other private IP WAN usage When using MaxWAN or other private IP WAN services, it is important to remember that the connectivity may be restricted and adjust parameters accordingly. If you use MaxWAN for example and do not remove the ICMP detection server, the Multimax will continuously drop and reconnect the WAN as it is not correctly detecting the link as up. Before using any server for link detection (including DHCP supplied default gateways), please ensure the server responds to ping (ICMP Echo Request) requests first. For use in MaxWAN, Maxon recommends no detection servers as below: 1.6 Notes on site to site (Multimax to Multimax) tunnels When using site to site (Multimax to Multimax) tunnels, you will need to ensure that the Multimax acting as the L2TP server has a routable IP address this may require you to change the APN you use. Since most carriers use dynamic IP address assignment for this kind of service, you will likely need to use a Dynamic DNS service provider such as DynDNS. Chapter 2. Configuration for topology Configuring the Cisco 2811 Router about L2TP 1. Configure the L2TP VPN in Cisco 2811 Router Page 6

7 Note: The following diagrams with red colour numbers mean that the parameters must be matched between server and client, and with the blue colour number means it must be configured locally for the L2TP VPN. Page 7

8 2.2 Configuring the MULTIMAX about L2TP VPN 1. Make sure Cellular is the main link and working correctly Configuration->Link Management 2. Make sure the MULTIMAX has get an IP address from ISP Status->Network Page 8

9 3. Enable L2TP client Configuration->L2TP ->L2TP Client Then click Apply->Save- >Reboot. 2.3 Start Testing 1. Check the L2TP VPN status at server side Status->VPN->L2TP VPN Page 9

10 2. Ping Administration->Tools->Ping 3. Ping Administration->Tools->Ping 4. Testing successfully. Page 10

11 Chapter 3. Configuration for topology Configuring L2TP VPN in MULTIMAX 1. Configure the L2TP VPN in MULTIMAX Configuration->L2TP->Server Then Apply->Save-> Reload. Page 11

12 3.2 Configuring the PC client 1. right-click My Network Places, select the Properties 2. click Create a new connection Page 12

13 3. Choose Connect to the network at my workplace 4. Choose Virtual Private Network connection Page 13

14 5. Type the name of this connection 6. Type the IP address of the L2TP server Page 14

15 7. Click the Finish button to complete this connection 8. Check the Network Connections of PC, you will found out a new connection for L2TP has been created Page 15

16 9. right-click the test connection, select the Properties 10. Choose the Networking item and choose L2TP IPsec VPN for the Type of VPN Page 16

17 11. Choose the Security item, change the security option to Advanced(custom settings) and click the Setting button 12. Optional encryption (connect even if no encryption) and tick the checkbox of Challenge Handshake Authentication Protocol (CHAP), then click the OK button Page 17

18 3.3 Start Testing 1. Check status of L2TP VPN in MULTIMAX Configuration->VPN->L2TP 2. Double-click the test connection, type the username/password that pre-set by L2TP server and click the Connect button Page 18

19 3. right-click and select the status 4. Check status of test connection Page 19

20 5. Test in MULTIMAX, Ping Administrator->Tools->Ping 6. Test in PC Ping and Ping Testing successfully Note: if some warnning or error arise in the process, such as 789 in winxp or 741 in win7, you need to take some step to solve this problem by modify the registry. Page 20

21 a) click start and choose run, then type the key words regedit b) Click the path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ResMan\Parameters, then right-click the Parameters, choose New -> DWORD Value c) Name it as ProhibitIPsec and set the value 1, then click OK button Page 21

22 d) Modification will take effect when the operation system is shut down and restart Plus: when the L2TP VPN has been established, all the traffics are going through the L2TP tunnel by default. If you need to visit the Internet normally, please take these steps to cancel the l2tp server as your PC s default gateway. a) right-click of the test connection, select the Properties, then Choose the Networking item and click the Properties button Page 22

23 b) Click the Advanced button c) Do not tick the checkbox Use default gateway on remote network and click OK button Page 23

24 d) Then add a static route to the subnet in PC through l2tp tunnel and ping successfully Page 24