WRVS4400N

IPSEC Tunnel to OSX

The short version is: on the VPN tab, select IPSEC, and then create a new tunnel entry with a unique name.

Local security group is your LAN ip series (ie., WRVS4400N defaults to 192.168.1.0 and 255.255.255.0).

Assuming your dialing in from various locations, set Remote Security group and gateway to "any."

Key maanagement is Auto, Encryption 3DES, Authentication SHA1, PFS enable, enter your preshared key, key lifetime 28800 secs.

Save the configuration, hit okay through the warning about using "any" not working with QuickVPN.

Click Advanced Settings tab.

Operation mode = main. Local and Remote identity use the ip address circles on both. Phase 1 encryption = 3DES and SHA1 with 1024-bit and 3600 sec. Phase 2 = #DES and SHA1, PFS enable, 768-bit, key life 28800. Save settings.

In IPSECURITAS version 3 setup as follows: General Tab - enter ip address of the WRVS4400N's internet presence. Local side is Host, leav ip addres blank Remot side is Network and input the 192.168.10, CIDR=24 Phase1 tab should match what's on the advanced settings of the router listed above, you can leave proposal check on claim and nonce size as 16. Phase2 tab match to the router as well. ID tab = Address in both the identifiers; Authenitcation is your Presharked Key and password. Options tab you shouldn't need to touch, but you can enable NAT-T and add a keep alive ping if you want.

That's good enough to get me a green light on the connection on the mac, and an "up" status in the VPN's web interface.

IPSEC Tunnel to Cisco IOS

**Still pending confirmation -10/20/2009
Site A: WRVS4400N v1.1.13
Site B: Cisco 2821 Version 12.4(24)T1

 crypto isakmp policy 5
 encr 3des
 authentication pre-share
 group 2
 lifetime 28800
crypto isakmp key n3tInS address 97.125.188.90
crypto ipsec transform-set STRONG esp-3des esp-sha-hmac 
crypto map CISCO 10 ipsec-isakmp 
 set peer 97.125.188.90
 set transform-set STRONG 
 set pfs group2
 match address 101
 crypto map CISCO
interface Serial0/0/0:0
 ip address 167.142.60.62 255.255.255.252
 encapsulation ppp
 crypto map CISCO