6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 1/23

AVirtualPrivateNetwork(VPN)isaconnectionbetweentwoendpointsaVPNrouter,forinstanceindifferentnetworksthatallowsprivatedatatobesentsecurelyoverasharedorpublicnetwork,suchastheInternet.Thisestablishesaprivatenetworkthatcansenddatasecurelybetweenthesetwolocationsornetworksthrougha"tunnel."AVPNtunnelconnectsthetwoPCsornetworksandallowsdatatobetransmittedovertheInternetasifitwerestillwithinthosenetworks.Itisaconnectionsecuredbyencryptingthedatasentbetweenthetwonetworks.

TosetupaVPNTunnelonaLinksysrouteryouneedtoperformfoursteps:

1. ConnectingDevicesTogether2. VerifyingtheVPNSettingsNeededontheTwoRouters3. ConfiguringVPNTunnelsettingsonRouterA4. ConfiguringVPNTunnelsettingsonRouterB

ConnectingDevicesTogether

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 2/23

BeforeconnectingtoaVPNtunnelyouneedtoensurethatthereisanactiveInternetconnectionbetweenthetworoutersthatwillcommunicate.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4011).AfterensuringthatthereisanactiveInternetconnection,youneedtoverifytheVPNsettings.ToverifytheVPNsettingsofthetworouters,followtheinstructionsbelow.

VerifyingtheVPNSettingsNeededontheTwoRouters

InorderforyoutosuccessfullyconfigureaVPNtunnel,youneedtotakenoteofthesettingsneededtosetupatunnel.ToverifythesettingsneededforyourVPNTunnelfollowthestepsbelow.

Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).

NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).

Step2:ClickStatusthenGatewayandtakenoteoftheInternet/WANIPaddress.

RouterAsStatuspage:

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 3/23

RouterBsStatuspage:

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 4/23

Step3:ClickStatusthenLocalNetworkandtakenoteoftheIPaddress.

RouterAsStatuspage:

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 5/23

RouterBsStatuspage:

Setting up a VPN Tunnel on two(2) routers

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 6/23

NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).

Step4:MakesuretheLocalIPAddressofthetworoutersaredifferent.TakenotethattheLocalIPAddressofRouterAwillbeRouterBsRemoteSecureGroup.

NOTE:TochangethelocalIPaddressofaLinksysrouter,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3957).

Inthisexample,wewillusethefollowing:

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 7/23

Step5:Afterverifyingthesettingsneededtosetupatunnel,youneedtoconfigurethesettingsonRouterA.Forinstructions,followthestepsbelow.

ConfiguringVPNTunnelsettingsonRouterA

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 8/23

Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).

NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).

Step2:Whentherouterswebbasedsetuppageappears,clickSecuritythenVPN.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 9/23

NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).

Step3:SelecttheTunnelentryyouwishtocreate.

Step4:LookforVPNTunnelthenselectEnabled.

Step5:UnderTunnelNameenterthenameyouwanttosetyourtunnel.InthisexampleTunnel1wasused.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 10/23

Step6:LookforLocalSecureGroupandselecteitherSubnet,IPAddr.orIPRange,thenonthefieldsprovidedentertheappropriatevaluesoftherouter.Inthisexample,weselectedSubnetandentered192.168.1.0fortheIPand255.255.255.0fortheMask.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 11/23

Step7:UnderRemoteSecureGroup,selecteitherSubnet,IPAddr.,IPRange,HostorAny,thenonthefieldsprovidedentertheappropriatevaluesoftheremoterouter.Inthisexample,weselectedSubnetandentered192.168.2.0fortheIPand255.255.255.0fortheMask.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 12/23

Step8:LookfortheRemoteSecurityGatewaydropdownmenuandselecteitherIPAddr.,FQDNorAny,thenentertheWAN/InternetIPaddressortheDDNSoftheremoterouter.Inthisexample,weselectedIPAddr.andentered10.100.16.60fortheIPAddressfield.

Step9:UnderEncryption,selecttheencryptionlevelyouwishtoenableonyourtunnel.InthisexampleweusedDES.

NOTE:MakesuretheEncryptionlevelselectedisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.

Step10:UnderAuthentication,selecttheauthenticationmodeyouwishtoenableonyourtunnel.InthisexampleweusedMD5.

NOTE:MakesuretheAuthenticationmodeselectedisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 13/23

Step11:UnderKeyManagement,selectAuto(IKE).

Step12:MakesurePFS(PerfectForwardSecrecy)isEnabled.ThiswillensurethattheinitialkeyexchangeandIKEproposalsaresecured.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 14/23

Step13:UnderPresharedKey,enterthekeyyouwanttoenableonyourtunnel.InthisexampleMySecretKeywasused.

Step14:UnderKeyLifetime,enterthetimeperiodyouwantthekeytoexpireonyourtunnel.Inthisexample3600wasused.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 15/23

NOTE:MakesurethePresharedKeyandKeyLifetimeenteredarethesamewiththeremoterouter.

Step15:Click .

Step16:Afterverifyingthesettingsneededtosetupatunnel,youneedtoconfigurethesettingsonRouterB.Forinstructions,followthestepsbelow.

ConfiguringVPNTunnelsettingsonRouterB

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 16/23

Step1:Accesstherouterswebbasedsetuppage.Forinstructions,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=3676).

NOTE:Ifyou'reusingaMactoaccesstherouter'swebbasedsetuppage,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=15841).

Step2:Whentherouterswebbasedsetuppageappears,clickSecuritythenVPN.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 17/23

NOTE:Ifthescreenonyourrouterswebbasedsetuppagelooksdifferent,clickhere(http://kb.linksys.com/Linksys/ukp.aspx?vw=1&articleid=4218).

Step3:SelecttheTunnelentryyouwishtocreate.

Step4:LookforVPNTunnelandselectEnabled.

Step5:UnderTunnelName,enterthenameyouwanttosetyourtunnel.InthisexampleTunnel1wasused.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 18/23

Step6:LookforLocalSecureGroupandselecteitherSubnet,IPAddr.orIPRange,thenonthefieldsprovidedentertheappropriatevaluesoftherouter.Inthisexample,weselectedSubnetandentered192.168.2.0fortheIPand255.255.255.0fortheMask.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 19/23

Step7:UnderRemoteSecureGroupselecteitherSubnet,IPAddr.,IPRange,HostorAny,thenonthefieldsprovidedentertheappropriatevaluesonyourrouter(thisvaluesshouldbefromtheremoterouter).InthisexampleweselectSubnetandenter192.168.1.0fortheIPand255.255.255.0fortheMask.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 20/23

Step8:LookfortheRemoteSecurityGatewaydropdownmenuandselecteitherIPAddr.,FQDNorAny,thenentertheWAN/InternetIPaddressortheDDNSoftheremoterouter.Inthisexample,weselectedIPAddr.andentered22.15.160.53fortheIPAddressfield.

Step9:UnderEncryption,selecttheencryptionlevelyouwishtoenableonyourtunnel.InthisexampleweusedDES.

NOTE:MakesuretheEncryptionlevelisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.

Step10:UnderAuthentication,selecttheauthenticationmodeyouwishtoenableonyourtunnel.InthisexampleweusedMD5.

NOTE:MakesuretheAuthenticationmodeisthesamewiththerouteryouwishtoestablishaVPNtunnelwith.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 21/23

Step11:UnderKeyManagement,selectAuto(IKE).

Step12:MakesurePFS(PerfectForwardSecrecy)ischecked.ThiswillensurethattheinitialkeyexchangeandIKEproposalsaresecured.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 22/23

Step13:UnderPresharedKey,enterthekeyyouwanttoenableonyourtunnel.InthisexampleMySecretKeywasused.

Step14:UnderKeyLifetime,enterthetimeperiodyouwantthekeytoexpireonyourtunnel.Inthisexample3600wasused.

6/30/2015 LinksysOfficialSupportSettingupaVPNTunnelontwo(2)routers

http://www.linksys.com/us/supportarticle?articleNum=132865 23/23

NOTE:MakesurethePresharedKeyandKeyLifetimeenteredarethesamewiththeremoterouter.

Step15:Click .

Step16:Click .