Ubigate iBG2016 Configuration Guide/Ed.00© SAMSUNG Electronics Co., Ltd. 287Supporting Remote User Access ExampleThe following example demonstrates how to configure a router to be an IPSecVPN server using user group method with extended authentication(XAUTH)for remote VPN clients. The client could be any standard IPSec VPN client.In this example, the client needs to access the corporate private network10.0.1.0/24 through the VPN tunnel. The security requirements are as follows:y Phase 1: 3DES with SHA1, Xauth(Radius PAP)y Phase 2: IPSec ESP tunnel with AES256 and HMAC-SHA11. Configure a WAN bundle of network type untrusted.Router/configure# interface bundle wan1Router/configure/interface/bundle wan1# link t1 0/2/0Router/configure/interface/bundle wan1# encapsulation pppRouter/configure/interface/bundle wan1# ip address172.16.0.1 24Router/configure/interface/bundle wan1# crypto untrustedRouter/configure/interface/bundle wan1# exit2. Configure the Ethernet interface with trusted network type.Router/configure# interface ethernet 0/1message: Configuring existing Ethernet interfaceRouter/configure interface/ethernet(0/1)# ip address10.0.1.1 24Router/configure/interface/ethernet(0/1)# crypto trustedRouter/configure/interface/ethernet(0/1)# exitCorporate Headquarters10.0.1.0/24Router #1VPN Server172.16.0.1IPSec TunnelVPN Client 1Local Address: Dynamicdevid@abc-corp.comVPN Client 2Local Address: Dynamicmike@abc-corp.comIPSec Tunnel
