[X4U] VPN to a Hardware Router DLink - DI-804HV

[ed]

Hi,

I had a real ***** of a time getting this to work...here are the settings I have that work. My router is a dlink dfl-700 so your mileage may vary.

You'll need to download a free program called IPSecuritas  http://www.lobotomo.com/products/IPSecuritas/

My config on the router:
  Authentification:  PSK
  Tunnel type:  roaming user
        "require user auth via IKE XAuth to open tunnel" is *unchecked*
  IKE mode:  main mode IKE

My config in IPSecuritas:
mode: host to network
remote network: 192.168.0.0/24
local address:  (blank)
exchange mode: main
proposal check: obey
nonce size: 16
phase 1:
  lifetime: 28800 seconds
  dh group: mod1024 (2)
  encryption: aes 256
  authentification: sha1
phase 2:
  lifetime: 28800 seconds
  pfs group: none
  encryption: aes 128
  authentification: hmac sha1
options:
  these are *on*
    compression/deflate
    IPSec DOI
    SIT_IDENTITY_ONLY
    initial contact
    Passive
    MIP6
    DHCP pass-through
    establish IKE immediately
  these are *off*
    generate policy
    verify identifier
    verify certificate

Good luck!
Ed



>Date: Thu, 3 Feb 2005 13:43:09 -0600
>From: Joe Sporleder <joe at wacondatrader.com>
>Subject: [X4U] VPN to a Hardware Router DLink - DI-804HV
>To: "A place to discuss Mac OS X for the casual user."
>	<x4u at listserver.themacintoshguy.com>
>Message-ID: <1c8412c14654b739b8b9a44ef7f2cd3c at wacondatrader.com>
>Content-Type: text/plain; charset=US-ASCII; format=flowed
>
>Can someone tell me what the trick is to log into a VPN hardware 
>broadband router <DLink with a model number: DI-804HV) from the 
>built-in VPN client in MacOS X Panther? I'm guessing there is something 
>on the Router I don't have setup correctly. All of the directions from 
>the manual seem to be oriented towards connecting 2 hardware 
>devices/routers, via VPN. Their info and examples for connecting 
>software VPN clients (especially the Mac ones) into their router seem 
>to be rather limited.
>
>Joe