https://hurlster.com/wiki/index.php?action=history&feed=atom&title=WRVS4400NWRVS4400N - Revision history2026-07-10T23:28:43ZRevision history for this page on the wikiMediaWiki 1.38.4https://hurlster.com/wiki/index.php?title=WRVS4400N&diff=52&oldid=prevGqwill69: /* IPSEC Tunnel to Cisco IOS */2009-10-20T20:00:34Z<p><span dir="auto"><span class="autocomment">IPSEC Tunnel to Cisco IOS</span></span></p>
<p><b>New page</b></p><div>== IPSEC Tunnel to OSX ==<br />
<br />
The short version is: on the VPN tab, select IPSEC, and then create a new tunnel entry with a unique name.<br />
<br />
Local security group is your LAN ip series (ie., WRVS4400N defaults to 192.168.1.0 and 255.255.255.0).<br />
<br />
Assuming your dialing in from various locations, set Remote Security group and gateway to "any."<br />
<br />
Key maanagement is Auto, Encryption 3DES, Authentication SHA1, PFS enable, enter your preshared key, key lifetime 28800 secs.<br />
<br />
Save the configuration, hit okay through the warning about using "any" not working with QuickVPN.<br />
<br />
Click Advanced Settings tab.<br />
<br />
Operation mode = main.<br />
Local and Remote identity use the ip address circles on both.<br />
Phase 1 encryption = 3DES and SHA1 with 1024-bit and 3600 sec.<br />
Phase 2 = #DES and SHA1, PFS enable, 768-bit, key life 28800.<br />
Save settings.<br />
<br />
In IPSECURITAS version 3 setup as follows:<br />
General Tab - enter ip address of the WRVS4400N's internet presence.<br />
Local side is Host, leav ip addres blank<br />
Remot side is Network and input the 192.168.10, CIDR=24<br />
Phase1 tab should match what's on the advanced settings of the router listed above, you can leave proposal check on claim and nonce size as 16.<br />
Phase2 tab match to the router as well.<br />
ID tab = Address in both the identifiers; Authenitcation is your Presharked Key and password.<br />
Options tab you shouldn't need to touch, but you can enable NAT-T and add a keep alive ping if you want.<br />
<br />
That's good enough to get me a green light on the connection on the mac, and an "up" status in the VPN's web interface.<br />
<br />
== IPSEC Tunnel to Cisco IOS ==<br />
<font color="red">**Still pending confirmation -10/20/2009</font><br /><br />
Site A: WRVS4400N v1.1.13<br /><br />
Site B: Cisco 2821 Version 12.4(24)T1<br />
crypto isakmp policy 5<br />
encr 3des<br />
authentication pre-share<br />
group 2<br />
lifetime 28800<br />
crypto isakmp key n3tInS address 97.125.188.90<br />
crypto ipsec transform-set STRONG esp-3des esp-sha-hmac <br />
crypto map CISCO 10 ipsec-isakmp <br />
set peer 97.125.188.90<br />
set transform-set STRONG <br />
set pfs group2<br />
match address 101<br />
crypto map CISCO<br />
interface Serial0/0/0:0<br />
ip address 167.142.60.62 255.255.255.252<br />
encapsulation ppp<br />
crypto map CISCO<br />
[[Category:Linux]]</div>Gqwill69