This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
app-notes:ipsec-fritzbox [2021/11/24 12:41] – klueppel | app-notes:ipsec-fritzbox [2021/11/25 09:00] (current) – klueppel | ||
---|---|---|---|
Line 2: | Line 2: | ||
This has been tested with Netmodule SW 4.5.0.106 and Fritz!OS: 07.28. | This has been tested with Netmodule SW 4.5.0.106 and Fritz!OS: 07.28. | ||
- | At first, we configure the Fritzbox to accept VPN LAN2LAN connection. | + | At first, we configure the Fritzbox to accept VPN LAN2LAN connection. |
+ | Instructions can be found at AVM https:// | ||
Internet -> Permit Access -> VPN: Add VPN Connection | Internet -> Permit Access -> VPN: Add VPN Connection | ||
Line 12: | Line 13: | ||
| VPN password (pre-shared key) | admin01admin01 | | VPN password (pre-shared key) | admin01admin01 | ||
| Name of the VPN connection | | Name of the VPN connection | ||
- | | Web address of the remote site | + | | Web address of the remote site* |
- | | Web address of this FRITZ!Box | + | | Web address of this FRITZ!Box*2 |
| Remote network | | Remote network | ||
| Subnet mask | 255.255.255.0 | | Subnet mask | 255.255.255.0 | ||
| Hold VPN connection permanently | | Hold VPN connection permanently | ||
+ | *This value needs to be set on Netmodule Router as LocalID, Local ID Type IP-Address | ||
Click OK to save the changes. | Click OK to save the changes. | ||
+ | |||
+ | *2 Please use your configured hostname. | ||
Now we can configure the netmodule router: | Now we can configure the netmodule router: | ||
Line 28: | Line 32: | ||
| Config mode | | | Config mode | | ||
| Local address | 0.0.0.0 | | | Local address | 0.0.0.0 | | ||
- | | Remote peer address | netmodule.ddns.net | + | | Remote peer address | |
Line 98: | Line 102: | ||
ipsec.0.ike.dh=modp1024 | ipsec.0.ike.dh=modp1024 | ||
ipsec.0.ike.localId=1.2.3.4 | ipsec.0.ike.localId=1.2.3.4 | ||
- | ipsec.0.ike.remoteId=fab.funkturm.tk | + | ipsec.0.ike.remoteId=netmdoule.ddns.net |
ipsec.0.ike.remoteIdType=FQDN | ipsec.0.ike.remoteIdType=FQDN | ||
ipsec.0.esp.hash=sha1 | ipsec.0.esp.hash=sha1 |