Annet AR Series IPSec VPN Basic Configuration Guide

About this manual

This manual provides instructions for configuring the IPSec module on Annet devices operating with AlliedWare TM software. It details the prerequisites, such as static public IP addresses and optional encryption cards (EMAC or EPAC), noting that certain router series include these features by default.

The document offers step-by-step configuration examples for Point-to-Point LAN to LAN VPNs. These scenarios cover both fixed IP address setups and dynamic ADSL environments with Firewall and NAT enabled, including the creation of security users, ISAKMP policies, IPSec bundles, and traffic filtering strategies. This manual is written in Chinese.

What's inside

• Overview
• Implementation Requirements
• Configuration Planning Steps
• Point-to-Point VPN Example 1 (Fixed IP)
• Point-to-Point VPN Example 2 (Dynamic ADSL)
• Verification and Troubleshooting

Specifications

Frequently asked questions

Which Annet products can act as an IPSec VPN gateway?

The AR300, AR400, and AR700 series routers, and AT-Rapier24i/Rapier16fi/8800 series switches.

Is an encryption card required for all devices?

Yes, unless the device is a router with 'S' in its name (e.g., AR450S) which has built-in encryption and firewall licenses.

What is the recommended router for better IPSec performance?

The AR450S or AR750S routers are recommended for better performance.