VPN accesses for employees who dial into the network with the LANCOM Advanced VPN Client are very easy to set up with the Setup Wizard and exported to a file. This file can then be imported as a profile by the LANCOM Advanced VPN Client. All of the information about the VPN router's configuration is also included, and then supplemented with randomly generated values (e.g. for the preshared key).
- In LANconfig, use to start the Provide remote access (RAS, VPN) setup wizard.
- In the subsequent dialog, select VPN connection over the Internet as the connection type and click Next.
- From the list, select the entry LANCOM Advanced VPN Client [...] and activate the option Speed up configuration with 1-Click-VPN.
- Next, enter a name for this access and select the address under which the router is accessible from the Internet.
- In the final step you can select how the access data is to be entered:
- Save profile as an import file for the LANCOM Advanced VPN Client
- Send profile via e‑mail
- Print out profile
DANGER
Sending a profile via e-mail could be a security risk should the e-mail be intercepted. To send the profile via e‑mail, the device configuration must be set up with an SMTP account with the necessary access data. Further, the configuration computer requires an e-mail program that is set up as the standard e-mail application and that can be used by other applications to send e-mails.
When setting up the VPN access, certain settings are made to optimize operations with the LANCOM Advanced VPN Client, including:
- Gateway: If defined in the VPN router, a DynDNS name is used here, or alternatively the IP address
- FQDN: Combination of the name of the connection, a sequential number and the internal domain in the VPN router
- Domain: If defined in the VPN router, the internal domain is used here, or alternatively a DynDNS name or IP address
- VPN IP networks: All IP networks defined in the device as type 'Intranet'.
- Pre-shared key: Randomly generated key 16 ASCII characters long.
- Connection medium: The LAN is used to establish connections.
- VoIP prioritization: VoIP prioritization is activated as standard.
- Exchange mode: The exchange mode to be used is 'Aggressive Mode'.
- IKE config mode: The IKE config mode is activated, the IP address information for the LANCOM Advanced VPN Client is automatically assigned by the VPN router.
