Инструкция для ASUS sl1000
A
PPLICATION
N
OTES
–
C
REATING AN
IKE IP
SEC
T
UNNEL
B
ETWEEN AN
I
NTERNET
S
ECURITY
R
OUTER AND A
W
INDOWS
2000/XP PC
Copyright 2003, ASUSTeK Computer, Inc.
Page
1
C
REATING AN
IKE IPS
EC
T
UNNEL
B
ETWEEN AN
I
NTERNET
S
ECURITY
R
OUTER AND
A W
INDOWS
2000/XP PC
Release date: 11/12/2003
1 Introduction
This application note details the steps for creating an IKE IPSec VPN tunnel between an ASUS Internet Security
Router and a PC running Microsoft Windows 2000 or XP. It is assumed that both sides have static IP address for
the WAN interface, and a default route configured. All settings and screen dumps contained in this application
notes are taken from a Microsoft Windows 2000/XP, and an ASUS Internet Security Router. You may change the
IP address, subnet mask and default gateway IP address of any device to match your true network environment.
Router and a PC running Microsoft Windows 2000 or XP. It is assumed that both sides have static IP address for
the WAN interface, and a default route configured. All settings and screen dumps contained in this application
notes are taken from a Microsoft Windows 2000/XP, and an ASUS Internet Security Router. You may change the
IP address, subnet mask and default gateway IP address of any device to match your true network environment.
2 Network Setup
Connect all the devices as indicated in Figure 2.1. The IKE IPSec tunnel ends at the Internet Security Router and
PC2. Note that in the actual applications, the Internet Security Router and the Windows 2000/XP PC are most
likely connected via the Internet instead of a switch as shown in Figure 2.1.
PC2. Note that in the actual applications, the Internet Security Router and the Windows 2000/XP PC are most
likely connected via the Internet instead of a switch as shown in Figure 2.1.
1 2 3 4 5 6
7 8 9 101112
A
B
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
E
th
e
rn
e
t
A
12x
6x
8x
2x
9x
3x
10x
4x
11x
5x
7x
1x
C
Windows 2000/XP
PC1:
192.168.1.10
192.168.1.10
WAN: 192.168.18.146
PC2:
192.168.19.166
192.168.19.166
Switch
LAN: 192.168.1.1
Internet Security
Router
Router
Figure 2.1. Network Diagram
2.1 Configure the IP Address of the Windows PC
– PC2
1. Open the
“Internet Protocol (TCP/IP) Properties” dialog box
a) For Windows 2000, click on
“Start” è select “Settings” è click on “Network and Dial-up Connections”
icon
è right click on
“Local Area Connection” icon or the icon that represents your PC’s network card
è select
“Properties” è double click on “Internet Protocol (TCP/IP)”.
b) For Windows XP, click on
“Start” è select “Control Panel” è click on “Network Connections” icon è
right click on
“Local Area Connection” icon the icon that represents your PC’s network card è select
“Properties” è double click on “Internet Protocol (TCP/IP)”.
2. Set a static IP address
– 192.168.19.166 (see Figure 2.2)
a) Click on
“Use the following IP address:” radio button.
b) Enter IP address, subnet mask and default gateway as illustrated in Figure 2.2.