3Com Router WL-602 User Manual

							VPN109
Figure 89   VPN Screen
1Check the Enable IPsec box, configuration details screen appears. 
Figure 90   Enable IPSec Screen
2Enter the Local ID Name of your VPN. (the default is 3ComVPN) 
3Click Add to create a new entry, see Figure 91 
						

							110CHAPTER 5: CONFIGURING THE ROUTER
Figure 91   Add New VPN Tunnel Parameter Screen
On the VPN Tunnel Parameter screen, 
1Set the VPN Tunnel Type to IPSec.
2Enter a descriptive name for the tunnel in the Tu n n e l  N a m e field.
3Remote VPN Gateway - select IP address, and then enter the IP address in 
the IP Address/Host Name field. If you select ANY, then it would be no 
need to enter the IP address, as any remote server can be used.
4At the Remote Party ID drop-down list, select either IP_IPV4_ADDR or 
ID_USER_FQDN. This information must be entered identically on the IPSec 
software installed on the client’s machine. 
If IP_IPV4_ADDR is selected, then enter the IP address and subnet mask in 
the Remote Network Address, and Remote Subnet Mask fields. The 
remote network address is usually the network address of the LAN 
connected to the remote server. 
If ID_USER_FQDN is selected, then enter the name for the Remote Party 
ID in the text box area next to the drop-down menu. This name must be 
unique for each connection rule that you create. Enter the IP address and 
subnet mask in the Remote Network Address, and Remote Subnet Mask 
fields.  
						

							VPN111
Note that if you select IKE Main Mode from the Key Management 
drop-down menu (see step 6), you must enter IP_IPV4_ADDR here.
5Select the Local Party ID, and then enter the ID, Network Address and 
Subnet Mask of the Local Secure Group. The network address of the local 
secure group is usually the network address of the local network.
6From the Key Management drop-down menu, select either IKE Main 
Mode or IKE Aggressive Mode.
7SA (Security Association) attribute - select the option to use for SA 
attribute.
8In the Pre-shared Key field, enter the password for the connection. This 
must be unique for each connection rule that you create.
9Select MD5, or SHA1from the Authentication Algorithm drop-down 
menu. Both ends of the connection must use the same value.
10Select DES, 3DES, Null, AES-128, AES-192, or AES-256 from the Encrypt 
Algorithm drop-down menu. Both ends of the connection must use the 
same value.
11Enter the Key lifetime, in seconds. The default is 3600 seconds. The value 
must be at least 300 seconds.
12PFS - Perfect Forward Secrecy, check this box, then the Diffie-Hellman 
Group options become available. The use o PFS is optional, enabling PFS 
will add another layer of encryption security. 
13Diffie-Hellman Group - select the group to use for Diffie-Hellman key 
exchange. 
14Check the IKE Keep Alive box to enable this function. The time value is 
the number of seconds that the router waits between sending IKE 
keepalive packets.
15Click Apply.  
						

							112CHAPTER 5: CONFIGURING THE ROUTER
Check the Enable L2TP box, configuration details screen appears, see 
Figure 92
Figure 92   Enable L2TP Screen 
1Enter the Pre-shared Key for L2TP Server over IPSec Setting. 
2Define the IP Address Pool for L2TP clients, enter the start/end address.
3Click Add to create a new entry, see Figure 93
Figure 93   Add New VPN Tunnel Parameter L2TP over IPSec Screen 
						

							VPN113
1Set the Tunnel Type to L2TP over IPSec. 
2Enter a descriptive name for the tunnel in the Tu n n e l  N a m e field.
3Enter the User name and Password. 
4Enter the Idle Timeout value. 
5Set the L2TP Type Setting to L2TP Server, or L2TP Client. 
■if you set the type as L2TP Client, then set the Local Type Setting to 
Network or Host, then enter the Remote Server IP. Check the Auto 
reconnect box, if you want to auto-reconnect after disconnection.
■if the L2TP Type Setting is set to L2TP Server, go to step 6. 
6Check the box to enable the Remote Network Setting, and then enter the 
Remote Network Address, and Remote Subnet Mask information.
7When the L2TP Type Setting is set to L2TP Client, you would then need to 
enter the Pre-shared Key information. 
8Click Apply. 
Check the Enable PPTP box, configuration details screen appears, see 
Figure 94
Figure 94   Enable PPTP Screen 
1Define the IP Address Pool for PPTP clients, enter the start/end address.
2Click Add to create a new entry, see Figure 93 
						

							114CHAPTER 5: CONFIGURING THE ROUTER
Figure 95   Add new PPTP VPN Tunnel Screen 
1Set the Tunnel Type to PPTP. 
2Enter a descriptive name for the tunnel in the Tu n n e l  N a m e field.
3Enter the User name and Password. 
4Enter the Idle Timeout value. 
5Set the PPTP Type Setting to PPTP Server, or PPTP Client. 
■if you set the type as PPTP Client, then set the Local Type Setting to 
Network or Host, then enter the Remote Server IP. Check the Auto 
reconnect box, if you want to auto-reconnect after disconnection.
■if the PPTP Type Setting is set to PPTP Server, go to step 6. 
6Check the box to enable the Remote Network Setting, and then enter the 
Remote Network Address, and Remote Subnet Mask information.
7When the PPTP Type Setting is set to PPTP Client, you would then need to 
enter the Pre-shared Key information. 
8Click Apply.  
						

							System Tools115
System ToolsThese screens allow you to manage different parameters of the Router 
and perform certain administrative functions.
Restart RouterSometimes it may be necessary to restart (or reboot) the Router. 
Restarting the Router from this screen will not delete any of your 
configuration settings. 
Click the Restart the Router button to restart the Router.
Figure 96   Restart Router Screen
ConfigurationUse this configuration screen to backup, restore or reset the 
configuration details of the Router. 
Figure 97   Configuration Screen 
						

							116CHAPTER 5: CONFIGURING THE ROUTER
■Backup Configuration — You can save your current configuration by 
clicking the Backup button. Saving your configuration will allow you 
to restore it later if your settings are lost or changed. It is 
recommended that you backup your current configuration before 
performing a firmware update.
■Restore Configuration Data — The Restore Settings option will allow 
you to restore a previously saved configuration. Please select the 
configuration file using the Browse button and click Restore.
■Reset to Factory Default — Using this option will reset all of the 
settings in the Router to the factory default settings. It is 
recommended that you backup your settings before you restore all of 
the defaults. To restore the factory default settings, click Reset. Note 
that all of your current configuration will be lost.
UpgradeFrom time to time 3Com may release new versions of the Router’s 
firmware. Firmware updates contain improvements and fixes to problems 
that may have existed.
Figure 98   Upgrade Screen
Please download the firmware file to your PC first, and then click Browse 
to locate the file, and select the firmware file. Click Upgrade to upload 
the firmware to the Router. 
						

							System Tools117
Time ZoneYou can set the time settings for the Router on this screen. 
Figure 99   Time Zone Screen
The Router keeps time by connecting to a Network Time Protocol (NTP) 
server. This allows the Router to synchronize the system clock to the 
Internet. The synchronized clock in the Router is used to record the 
security log and control client filtering. Select the time zone that you 
reside in. 
If you reside in an area that observes Daylight Saving, then check the 
Enable Daylight Savings box. The system clock may not update 
immediately. Allow at least 15 minutes for the Router to contact the time 
servers on the Internet and get a response. You cannot set the clock 
yourself.
You can specify which NTP servers the Router will use to update the 
system clock, although doing this should only be necessary if you are 
experiencing difficulty. 
						

							118CHAPTER 5: CONFIGURING THE ROUTER
PingThe ping tool is used to test if the network is working properly. 
Figure 100   Ping Screen
1Enter the IP address or domain name in the IP Address or Domain Name 
field, and click Ping. 
2Select from the Number of times to Ping drop-down menu.
3The Router keeps a log of the ping test, click Clear Log to delete the 
records.