Specify Encapsulation Mode as Tunnel Mode.(3) In the Phase-2 Settings section, configure the IKE phase-2 parameters. Here we specify the local ID as 123 and remote ID as 321. Specify the local/remote ID as you like.Once the VPN server or client is behind a NAT device, we have to select Aggressive Mode as Exchange Mode and select NAME as Local/Remote ID Type, otherwise, the VPN tunnel can’t be established. Specify Negotiation Mode as Responder Mode.Specify Exchange Mode as Aggressive Mode.In the Phase-1 Settings section, configure the IKE phase-1 parameters. (2) Click Advanced Settings to load the following page. Specify the Pre-shared Key as you like.Specify WAN as WAN1 and local subnet as 192.168.0.0/24.You also can enter 0.0.0.0 to allow any IP address. Specify the Remote Host as 10.10.10.20.Configure the basic parameters for the IPsec policy. (1) Choose the menu VPN > IPSec > IPSec Policy and click Add to load the following page on the VPN router. Step1 Verify the settings needed for IPsec VPN on routerĬhoose the menu Status > System Status and Network > LAN.

Take the following topology as an example, we will learn how to configure the VPN server and VPN client. But we need to use some VPN client software like Shrew. Then we can access the private network of the VPN Router securely via the internet. With Client to LAN VPN function, the VPN Router will be a VPN server and we can use our PCs to establish the VPN tunnel with it.

Shrew soft vpn client download chip