Filter
Top Products
There are many settings that must be configured to enable VPN for a dedicated tunnel:
• Tunnel Name. The tunnel name is simply a name for this tunnel
(i.e.VPNtoGalileo)
• Local Group Setup:
o Local Security Gateway Type: IP Only
o IP Address: This will be pre-filled in from the WAN IP address as
previously selected.
o Local Security Group Type: Subnet
o IP Address: The Network address assigned by Galileo. This is usually 1
less than the Router address. (i.e. 10.185.5.160)
o Subnet Mask: Subnet mask provided by Galileo. (i.e.255.255.255.224)
• Remote Security group:
o Remote Security Gateway Type: IP Only
o IP Address: This is the address of the Remote PEER provided by Galileo
(i.e. 198.151.32.16)
o Remote Security group type: Subnet
o IP Address: This is the address of the remote network to get to Galileo
services. This will be one of the following networks:
57.8.81.0 – Galileo Production Net 1
198.177.164.0 – Galileo Production Net 2
167.125.0.0 – Galileo Canada Leisure Link
o Subnet Mask: 255.255.255.0
• IPSec setup: Phase 1
o Keying Mode: IKE with Preshared Key
o Phase 1 DH group: Group 2
o Phase 1 Encryption: 3DES
o Phase 1 Authentication: SHA1
o Phase 1 SA Lifetime: 86400 seconds
• IPSec Setup: Phase 2
o
Perfect forward Secrecy: Not checked
o Phase 2 DH group: Group 2
o Phase 2 Encryption: 3DES
o Phase 2 Authentication: SHA1
o Phase 2 SA Lifetime: 28800 seconds
o Preshared Key: Provided by Galileo as needed
• Advanced:
o Aggressive Mode: Checked
o Compress (Support IP Payload Compression Protocol(IP Comp)):
Not Checked
o Keep Alive: Checked
o AH Hash Algorithm: Not Checked
o Netbios Broadcast: Not Checked
24