...
1.16) This concludes the configuration steps on the Unified Firewall.
2) Configuring the Advanced VPN Client:
2.1 Unpack the Zip file your exported in step 1.15. In it you will find an *.ini file, which you can import in the LANCOM Advanced VPN Client.
2.2) Open the Advanced VPN Client and navigate to the menu Configuration -> Profiles.
2.23) Click on Add / import to create a new VPN connection.
2.34) Select Link to Corporate Network Using IPSec.2.4) Enter a descriptive name. Profile Import.
2.5) Select the Communication medium.
Info:
If you use changing communication media (e.g. LAN and WLAN), use the option Communication media automatic.
2.6) Enter the public IP address or the DynDNS name of the Unified Firewall.
2.7) Set the Exchange Mode to IKEv2 and the PFS Group to DH16 (modp4096). Disable the option IPSec-over-HTTPS.
2.8) Save the following parameters:
- Type: From the drop-down menu, select the identity type Fully Qualified Username (FQUN).
- ID: Enter the Remote identifier set in step 1.6.
- Shared Secret: Enter the Preshared key set in step 1.6.
2.9) From the drop-down menu, select the IKE Config Mode so that the VPN client automatically receives the IP address from the Unified Firewall.
2.10) In order to use the function Split Tunneling, enter the target network to be reached via the VPN tunnel.
Important:
If split tunneling is not configured, all traffic is transferred over the VPN tunnel while it is established, including traffic intended for the local network or the Internet. This can lead to problems with the communication!
Enter the path where you you unpacked the *.ini file (see step 2.1)).
2.6) Click Next.
2.7) Click on Finish to finalize the file import.
2.8) Click on OK to close the Profiles menu.
2.9) The VPN client connection can now be established by clicking on the Connection switch. 2.11) This concludes the configuration steps in the Advanced VPN Client.
3) Setting up port and protocol forwarding on a LANCOM router (scenario 2 only):
...