Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[unnamedplayer]

OK, so I finally implemented a VPN!

I followed the FAQ "How do I add a L2TP over IPSec Server using PSK and Local User Authentication?" at http://www.dlink.com/support/faqDetail/?prod_id=3248&print=1 and it was pretty painless, but I have a few questions.

Mainly, how secure is this? I ask because when setting up the VPN on the router, specifically configuring the User Authentication Rule, the FAQ said under the PPP Agent Options to Allow Unauthenticated Users, Unencrypted Password (PAP).

Also, to setup the client I used the FAQ "How do I configure my Windows Vista & Windows 7 computer to connect to a L2TP over IPsec Tunnel on my DFL series firewall?" at http://www.dlink.com/support/faqDetail/?prod_id=3250&print=1

On the advanced Security settings of the VPN connection properties it says to allow Unencrypted Password (PAP) and CHAP. Which when I do I get a warning that if one of these protocols is negotiated, data encryption will not occur.

As you can tell I am a newb with VPN stuff, so any help would be appreciated. I have a client who will need remote access to the network and want to make sure I've taken the appropriate precautions to keep things secure.

Thanks!

[Fatman]

It is as secure as any PSK IPsec implementation.  The reason the documents had you use unencrypted L2TP modes is because that traffic is being tunnelled inside of a IPsec Tunnel that is encrypted, as such the L2TP encryption (which is less secure) is redundant.

[unnamedplayer]

Ah, thanks Fatman.

Another question, it seems (and I may have to do more testing but I don't have my laptop here to try) that if I was connected from my home desktop to one of my servers via Remote Desktop and then I VPN in on my laptop, that I would lose my connection on my desktop.

Does that sound right? Is there any way I can fix that?

Thanks!

[danilovav]

Do you have remote gateway on VPN enabled? Seems yes.

[Fatman]

There are not nearly enough details there to give a good suggestion, and I don't want to work from assumptions.  Where are the desktop and laptop in relation to each other?  Chere is the server?  Where is the VPN connection to?  In other words I would need more information about what networks (and potential NAT devices) are all these devices on.