Lantronix G520 G520 User Guide - Page 81

: VPN, IPsec (Internet Protocol Security), VPN

Get Lantronix G520 PDF manuals and user guides View all Lantronix G520 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 81 highlights

9: VPN A Virtual Private Network (VPN) tunnel carries traffic of a private network from one endpoint system to another over a public network such as the Internet. The traffic of a private network so carried over a public network does not know about the existence of the intermediate hops between the two endpoints. Similarly, the intermediate hops are also not aware that they are carrying the network packets that are traversing the tunnel. The tunnel may optionally compress and/or encrypt the data, providing enhanced performance and some measure of security. Note: The G520 series gateways support additional tunneling protocols. For L2TP, PPtP, or GRE protocol configuration, see Interface Protocols. IPsec (Internet Protocol Security) VPN > IPsec The IP Security (IPsec) suite of protocols are designed for cryptographically secure communication at the IP layer. The gateway uses standard IPsec protocol to protect traffic. The identity of communicating users is checked with the user authentication based on pre-shared keys (PSK) or X.509 certificates. The IPsec VPN instance can be started or stopped from the Web UI or by sending an SMS AT+VPN command. See Table 10-26 SMS AT Command Syntax. You can configure a router-to-router VPN connection. To configure an IPsec instance: 1. Go to VPN > IPsec, and click Add. 2. Under router to router, click Add. 3. Enter the VPN configuration details on the General Settings (Table 9-1) and Advanced Settings (Table 9-2) tabs. Parameters Profile Name Proto Type Enable Remote IPsec router Remote Address Remote ID Table 9-1 IPsec General Settings Description Enter the Profile Name to identify the router-to-router IPsec VPN connection. router to router is the only available option. Check to enable the connection. Enter the remote WAN IP Address or domain name of the remote IPsec router server. Enter the remote LAN IP Address and subnet of the remote IPSEC router server for use on the VPN connection. Enter the ID of the remote network as configured on the remote IPsec router server. G520 Series IoT Cellular Gateway User Guide 81

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
G520 Series IoT Cellular Gateway User Guide
81
9:
VPN
A Virtual Private Network (VPN) tunnel carries traffic of a private network from one endpoint
system to another over a public network such as the Internet. The traffic of a private network so
carried over a public network does not know about the existence of the intermediate hops between
the two endpoints. Similarly, the intermediate hops are also not aware that they are carrying the
network packets that are traversing the tunnel. The tunnel may optionally compress and/or encrypt
the data, providing enhanced performance and some measure of security.
Note:
The G520 series gateways support additional tunneling protocols. For L2TP,
PPtP, or GRE protocol configuration, see
Interface Protocols
.
IPsec (Internet Protocol Security)
VPN > IPsec
The IP Security (IPsec) suite of protocols are designed for cryptographically secure
communication at the IP layer. The gateway uses standard IPsec protocol to protect traffic. The
identity of communicating users is checked with the user authentication based on pre-shared keys
(PSK) or X.509 certificates.
The IPsec VPN instance can be started or stopped from the Web UI or by sending an SMS
AT+VPN command. See
Table 10-26 SMS AT Command Syntax
.
You can configure a router-to-router VPN connection.
To configure an IPsec instance:
1.
Go to VPN > IPsec, and click
Add
.
2.
Under router to router, click
Add
.
3.
Enter the VPN configuration details on the General Settings (
Table 9-1
) and Advanced
Settings (
Table 9-2
) tabs.
Table 9-1
IPsec General Settings
Parameters
Description
Profile Name
Enter the Profile Name to identify the router–to-router IPsec VPN
connection.
Proto Type
router to router is the only available option.
Enable
Check to enable the connection.
Remote IPsec router
Enter the remote WAN IP Address or domain name of the remote IPsec
router server.
Remote Address
Enter the remote LAN IP Address and subnet of the remote IPSEC
router server for use on the VPN connection.
Remote ID
Enter the ID of the remote network as configured on the remote IPsec
router server.