equinux VPN Tracker 8.1.1 - Manual (Page 16)

Setup for an Existing VPN
When connecting to a VPN that’s already set up, your goal is
to configure VPN Tracker to match the settings on your VPN
gateway. In order to do so, you will need information about
the VPN gateway’s configuration.
What if my organization does not support Macs?
We often hear from customers in organizations where Macs are not offi-
cially supported for VPN access. It may be difficult to get help if the IT help
desk isn’t set up to support Mac users. We’re here to help!
To find out more about your VPN gateway’s configuration, your first stop
should be your VPN gateway’s administrator: Your network administrator,
your IT department or your help desk are good places to ask.
If they cannot help, you may be able to obtain the settings from another
VPN client that has already been configured, for example on a Windows PC.
Obtain the Configuration
You will always need the following information:
‣ The public IP address or host name (e.g. “203.0.113.48” or
“vpn.example.com”) of the VPN gateway you are connecting to
‣ The brand of the VPN gateway (e.g. Cisco, SonicWALL, NETGEAR, ...)
‣ The pre-shared key
1 or the client certificate
You may also need one or more of the following:
‣ The address of the network you are connecting to through VPN
‣ The local identifier
2
‣ The model name of the VPN gateway (e.g. ASA Series, TZ Series, FVS318N, ...)
‣ The settings for phase 1 and 2 (encryption algorithms etc.)
‣ Your username and password, if Extended Authentication (XAUTH) is used
If you have any questions about specific settings, please refer to
the
→ Settings Reference in this manual. For some settings, in
particular phase 1 and 2 algorithms, it may be possible to
“guess” them – the reference will tell you if and how.
Cisco IPsec VPN
If you have a Cisco IPsec VPN connection profile (.pcf ), you can import it
directly into VPN Tracker (File > Import > Cisco VPN Client Connection).
Configure VPN Tracker
‣ Create a new VPN connection if you have not yet done so (see → Add a
New Connection for additional information).
‣ Enter the settings you obtained in the Basic and Advanced tabs.
If there is a configuration guide for your VPN gateway ( → Find
Your Configuration Guide), refer to it for additional advice. Keep
in mind that the configuration guide describes
a working setup,
but not the only working setup. In most cases, you won’t need
to make changes to a working setup on the VPN gateway.
Connecting
When you’re done setting up, skip ahead to → Connecting to Your New VPN to
see how to connect to your new VPN.
16
1 Not required for SonicWALL with “Use Default Key for Simple Client Provisioning” enabled
2 Some VPN gateways (e.g. Cisco) refer to the local identifier as “group name” or “group ID”