Sie zeigen eine alte Version dieser Seite an. Zeigen Sie die aktuelle Version an.

Unterschiede anzeigen Seitenhistorie anzeigen

Version 2 Aktuelle »


Description:

This document describes how to set up a LANCOM router to establish a IKEv1 VPN connection to Windows Azure.


Requirements:


Procedure:

1) Configuring the IPSec & IKE proposals:

In the LANCOM router configuration, create new IPSec & IKE proposals and use the parameters suggested by Microsoft.

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices#ipsec-parameter

1.1) Open the menu VPN -> IKE/IPSec -> IPSec proposals and create a new IPSec proposal for the VPN connection to Windows Azure.



1.2) Switch to the menu VPN -> IKE/IPSec -> IKE proposals and create a new IKE proposal for the VPN connection to Windows Azure.

The IKE proposal must use the same encryption algorithm as the IPSec proposal.




2) Configuring the PFS/IKE group:

2.1) Open the menu VPN -> IKE/IPSec -> Connection parameters and create a new entry for the VPN connection to Windows Azure.
  • Make sure that the PFS group is set to No PFS.
  • The IKE group is set to 2.

2.2) The entries for IKE and IPSec must also be selected in this dialog.



3) Creating a routing entry:

3.1) Open the menu IP router -> Routing -> IPv4 routing table and create a new entry for the VPN connection to Windows Azure.
  • Bear in mind that Microsoft provides its customers local networks with a B mask (255.255.0.0).
  • Select the VPN connection that you created for the router here.
  • Switch IP masquerading off.




  • Keine Stichwörter