User Tools
Site Tools
Trace:
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| app-notes:ipsec-fritzbox [2021/11/24 12:39] – [Table] klueppel | app-notes:ipsec-fritzbox [2021/11/25 09:00] (current) – klueppel | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| This has been tested with Netmodule SW 4.5.0.106 and Fritz!OS: 07.28. | This has been tested with Netmodule SW 4.5.0.106 and Fritz!OS: 07.28. | ||
| - | At first, we configure the Fritzbox to accept VPN LAN2LAN connection. | + | At first, we configure the Fritzbox to accept VPN LAN2LAN connection. |
| + | Instructions can be found at AVM https:// | ||
| Internet -> Permit Access -> VPN: Add VPN Connection | Internet -> Permit Access -> VPN: Add VPN Connection | ||
| Line 12: | Line 13: | ||
| | VPN password (pre-shared key) | admin01admin01 | | VPN password (pre-shared key) | admin01admin01 | ||
| | Name of the VPN connection | | Name of the VPN connection | ||
| - | | Web address of the remote site | + | | Web address of the remote site* |
| - | | Web address of this FRITZ!Box | + | | Web address of this FRITZ!Box*2 |
| | Remote network | | Remote network | ||
| | Subnet mask | 255.255.255.0 | | Subnet mask | 255.255.255.0 | ||
| | Hold VPN connection permanently | | Hold VPN connection permanently | ||
| + | *This value needs to be set on Netmodule Router as LocalID, Local ID Type IP-Address | ||
| Click OK to save the changes. | Click OK to save the changes. | ||
| + | |||
| + | *2 Please use your configured hostname. | ||
| Now we can configure the netmodule router: | Now we can configure the netmodule router: | ||
| Line 28: | Line 32: | ||
| | Config mode | | | Config mode | | ||
| | Local address | 0.0.0.0 | | | Local address | 0.0.0.0 | | ||
| - | | Remote peer address | netmodule.ddns.net | + | | Remote peer address | |
| Line 88: | Line 92: | ||
| Apply new settings. Now the netmodule router should connect to Fritzbox and both should share there networks. | Apply new settings. Now the netmodule router should connect to Fritzbox and both should share there networks. | ||
| + | |||
| + | You also can use a config and update your values: | ||
| + | < | ||
| + | ipsec.status=1 | ||
| + | ipsec.0.remote.serverIp=netmodule.ddns.net | ||
| + | ipsec.0.ike.psk=[enc]sTs/ | ||
| + | ipsec.0.ike.mode=aggressive | ||
| + | ipsec.0.ike.hash=sha1 | ||
| + | ipsec.0.ike.dh=modp1024 | ||
| + | ipsec.0.ike.localId=1.2.3.4 | ||
| + | ipsec.0.ike.remoteId=netmdoule.ddns.net | ||
| + | ipsec.0.ike.remoteIdType=FQDN | ||
| + | ipsec.0.esp.hash=sha1 | ||
| + | ipsec.0.esp.pfs=1 | ||
| + | ipsec.0.dpd.status=0 | ||
| + | ipsec.0.local.0.lanAddress=192.168.1.0 | ||
| + | ipsec.0.local.0.lanMask=255.255.255.0 | ||
| + | ipsec.0.local.0.natAddress=- | ||
| + | ipsec.0.remote.0.lanAddress=192.168.178.0 | ||
| + | ipsec.0.remote.0.lanMask=255.255.255.0 | ||
| + | </ | ||
| + | |||