[RESOLVED] how do i set up vpn

[ylen13]

i want to set up vpn between my house and the office, i need the ability to access files and launch couple of programs.(regarding programs if that is possible)

I got BEFSX41 router at the office that has vpn with 2 tunnels support.
Both places have static ip internet. At home i got WGRT624 router with no vpn support. How do i set up vpn secure connection between to places? I need it to be secured.

TIA.

[rollerover]

very good reading here and here

[hongman]

If you want to do router to router VPN, you'll need a VPN capable router both ends.

[ylen13]

If you want to do router to router VPN, you'll need a VPN capable router both ends.

how secure is software vpn to router vpn ?

[hongman]

IMO, just as secure. I mean, its still going to be implenting the same encryption/tunneling protocols, the only hit I can see is on performance. But I dont think its huge, or even noticeable.

This looks like just the thing:

http://www.homenethelp.com/vpn/router-config.asp

HTH

Hong

[ylen13]

IMO, just as secure. I mean, its still going to be implenting the same encryption/tunneling protocols, the only hit I can see is on performance. But I dont think its huge, or even noticeable.

This looks like just the thing:

http://www.homenethelp.com/vpn/router-config.asp

HTH

Hong

thx i think that's what i been looking for.

[ylen13]

finally got arround setting up my router in the office and using the guide i think i did it right. Now ready to set up software on my home pc problem is seem the software no longer available(guide was written in 2000). Any recomendation on what program to use for vpn prefferable a free one. Also do i need to set anything up on the office comp or is router vpn set up enough to let me access comps in my office?

TIA

edit:i checked my firewall log in my office and i see this
2006-03-04 15:19:00 8000/TCP from 66.159.251.x:3201 to 72.25.125.x:8000 Invalid TCP packet received, dropping packet (i replaced with x to hide ip)

obviously i didn't set up everything correctly, could use some help

[Tuttle]

Traffic to port 8000 doesn't sound like IPSec; what client did you try to use?

Windows XP has one, but the IPSec one isn't as easy to use as the PPTP one. Still; guide here.

I'm not aware of any other free IPSec clients, but you might find an old copy of SSH Sentinel somewhere with Google.

[ylen13]

tuttle thx for reply i tried using windows xp internal vpn connection. Going to look over the guide and will try to google for the software, if not i guess my only option will be to buy same router as i have in the office.

[ylen13]

found software and installed it, went thru the guide but still haveing problem it seems not able to connect to my vpn. When checking vpn log in my office route i see this

2006-03-06 11:58:37 IKE[6] Rx << MM_I1 : 66.159.x.x SA, VID, VID, VID, VID
2006-03-06 11:58:39 IKE[6] Tx >> MM_R1 : 66.159.x.x SA
2006-03-06 11:58:40 IKE[6] ISAKMP SA CKI=[a0b197fd 1000059] CKR=[fabfc10f 7322e91d]
2006-03-06 11:58:41 IKE[6] ISAKMP SA 3DES / MD5 / PreShared / MODP_1024 / 14400 sec (*14400 sec)
any idea what that means? Ip is my home ip address, what is everything else means. I probably made some stupid mistake but have no idea what it's

TIA

edit:just checked vip log and see this now

2006-03-06 12:42:06 IKE[8] Rx << QM_I1 : 66.159.x.xHASH, SA, NONCE, KE, ID, ID
2006-03-06 12:42:08 IKE[8] **Check your Local/Remote Secure Group settings !
2006-03-06 12:42:09 IKE[8] Tx >> Notify : INVALID-ID-INFORMATION

What does invalid id information means?

[Tuttle]

I'm guessing it's a difference in configuration for key exchange between the two ends. I'm not familiar enough with that logging format to say much else though I'm afraid.

[hongman]

What settings are you using for the vpn?

Also, what software are you using?

[ylen13]

What settings are you using for the vpn?

Also, what software are you using?

thx for reply, i am using SSH Sentinel v1.3.1 as for setting following all setting as in the guide that was posted earlier in this thread(link) do i need to change the way it exchanges key with router some other way? I will be home in couple of hours, if it makes easier to diangnos my problem i can list every setting in vpn both rotuer and software.
TIA.

[ylen13]

update:thx for everyone help got vpn to work, had to switch to des encryption, md5 authentication.