VPN
32
CG3000DCR Advanced Cable Modem Gateway
Set Up a Client-to-Gateway VPN Configuration
Setting up a VPN between a remote computer running the VPN client and a network gateway
involves these two steps:
1. Config
ure the VPN tunnel between the remote computer and the network gateway.
2. Configu
re the VPN client endpoint.
Table 3. Sample client-to-gateway VPN tunnel
VPN Tunnel Configuration
Connection Name RoadWarrior
Pre-Shared Key 12345678
Secure Association Main
Perfect Forward
Secrecy
Disabled
Encryption Protocol 3DES
Authentication
Protocol
SHA-1
Diffie-Hellman (DH)
Group
Group 2
Key Life in seconds 28800 (8 hours)
IKE Life Time in
seconds
3600 (1 hour)
VPN Endpoint Local IPSec ID LAN IP Address Subnet Mask FQDN or
Gateway IP
(WAN IP Address)
Client toCG3000D — — Dynamic
CG3000DCR toClient 192.168.3.1 255.255.255.0 22.23.24.25
Configure the VPN Client on the Remote Computer
This overview assumes that the computer running the client has a dynamically assigned IP
address. The computer must have a VPN client program installed that supports IPSec.
To configure the VPN client:
1. Add a connection
.
2. Configu
re the security policy in the VPN client software.
3. Configu
re the VPN client identity.
4. Configu
re the VPN client authentication.