Top Banner
Loading Internet Protocol Security (IPSec) Loading Internet Protocol Security (IPSec) (CDR-882/780/790/990 Cellular Router) (CDR-882/780/790/990 Cellular Router) Call Direct Document version 1.4 Last updated 17 December, 2010 [email protected]
14

Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Oct 17, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Loading Internet Protocol Security (IPSec)Loading Internet Protocol Security (IPSec)(CDR-882/780/790/990 Cellular Router)(CDR-882/780/790/990 Cellular Router)

Call Direct

Document version 1.4Last updated 17 December, 2010

[email protected]

Page 2: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Loading IPSec

To support IPSec functionality on your router two installation packages are required to be loaded viathe unit's Graphical User Interface (GUI).

1. Download the first firmware file named installer.tar.gz from the following link and save to your

computer:

http://media.netcomm.com.au/public/assets/file/0014/62033/installer.tar.gz

2. Download the second firmware file named ipsec-2.1.tar.gz from the following link and save to

your computer.

http://media.netcomm.com.au/public/assets/file/0017/62045/ipsec-2.1.tar.gz

3. Access the router webpage or GUI by navigating to http://192.168.1.50 in a web browser

using 'admin' (without quotes) for the username and 'password' for the password.

Note – If the IP address of the router is no longer the default (192.168.150) use this address instead.

If this address is unknown then to find the IP address the router is using:

Open a command prompt (Start > All Programs > Accessories > Command Prompt).

Type 'ipconfig' (without quotes) and press enter. Look for the default gateway address of the current

connection. This is the IP address of the router.

The screen shots below illustrate the steps required to access the Cellular Router’s web browser:

Page 3: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

4. Click on Application Load/Save and select the installer.tar.gz file you have previously saved to

your computer and then click on the Upload button.

Page 4: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Do not remove any power or ethernet cables until the (first) firmware file completion screen as shownbelow appears. Generally a firmware upgrade will take 2 – 3 minutes.

5. Now load the ipsec-2.1.tar.gz file using the same method in the previous step.

Page 5: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Do not power off or remove any cables until the firmware upgrade completion screen appears asshown below.

Page 6: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

6. Refresh the page (press the F5 button) and a new link labelled VPN should appear.

7. Select VPN to configure the IPSec tunnel on this page.

Note – If the page does not appear clear the browsers internet cache.

IPSEC is now installed

Page 7: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Sample Configuration for IPSec against a Cisco ISO12.3, LinksysSample Configuration for IPSec against a Cisco ISO12.3, Linksys

RV082 and Billion 7404RV082 and Billion 7404

How To Establish and IPSEC tunnel between a CDM882 and Cisco IOS 12.3How To Establish and IPSEC tunnel between a CDM882 and Cisco IOS 12.3

This document provides a sample configuration for establishing an IPSEC tunnel between a CDM882and a Cisco router running IOS 12.3.

NB: This configuration is provided as an example only, Call Direct cannot offer further assistance withCisco configuration.

CDM882 Configuration

Page 8: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Cisco Configuration

!version 12.3service timestamps debug datetime msec

service timestamps log datetime msecno service password-encryption!hostname Gateway

!boot-start-markerboot-end-marker!

logging buffered 10000 debuggingenable secret 5 $1$EdiK$Y7Vl/O18AW78wYWtdRFma1enable password m00nm4n!

no aaa new-modelip subnet-zero!!

ip name-server 192.168.14.1!ip audit notify logip audit po max-events 100

ip ssh break-string !! !

crypto isakmp policy 1 encr 3des hash md5 authentication pre-share

group 2 lifetime 28800crypto isakmp key CDCS address 10.0.0.0 255.255.255.0!

!crypto ipsec transform-set 3DES-MD5 esp-3des esp-md5-hmac !crypto dynamic-map dynmap 10

description CALLDIRECT set transform-set 3DES-MD5 set pfs group2 match address 100

reverse-route!!crypto map mymap 10 ipsec-isakmp dynamic dynmap

Page 9: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

!no voice hpi capture bufferno voice hpi capture destination !

!interface FastEthernet0/0 ip address 10.192.1.80 255.255.255.0 no ip redirects

duplex auto speed auto crypto map mymap!

interface Serial0/0 no ip address shutdown!

interface FastEthernet0/1 ip address 192.168.1.50 255.255.255.0 no ip redirects duplex auto

speed auto!interface Serial0/1 no ip address

shutdown

!ip http serverno ip http secure-serverip classless

ip route 0.0.0.0 0.0.0.0 10.192.1.254!!access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.3.0 0.0.0.255

!!!!

!!line con 0 exec-timeout 0 0

logging synchronousline aux 0line vty 0 4 password password

login!!!

end

Page 10: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

This document provides a sample configuration for establishing an IPSEC tunnel between a CDM882and a Linksys RV082.

NB: This configuration is provided as an example only, Call Direct cannot offer further assistance withLinksys configuration.

CDM882 Configuration

How To Establish an IPSEC tunnel between a CDM882 and Linksys RV082

Page 11: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

RV082 Configuration

Page 12: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

How To Establish an IPSEC tunnel between a CDM882 and Billion 7404How To Establish an IPSEC tunnel between a CDM882 and Billion 7404

This document provides a sample configuration for establishing an IPSEC tunnel between a CDM882and a Billion 7404 router.

NB: This configuration is provided as an example only, Call Direct cannot offer further assistance withBillion configurations.

CDM882 Configuration

Page 13: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware

Billion Configuration

Page 14: Loading Internet Protocol Security (IPSec)media.netcomm.com.au/public/assets/pdf_file/0010/64999/Loading-IPS… · Do not remove any power or ethernet cables until the (first) firmware