cradlepoint to adtran netvanta vpn setup example42c984762d1e921cceae...configuring the adtran...

© 2014 CradlePoint Technology. All rights reserved. Information subject to change without notice.

CradlePoint to Adtran NetVanta VPN Setup Example Quick Links - Summary

- Configuration

Summary

This document will guide you through creating an IPsec VPN tunnel between a Series 3 CradlePoint

router and an Adtran NetVanta 3120 router. The IPsec tunnel in this example assumes that the WAN

sources attached to both routers are publicly routable and not behind a NAT.

Configuration

Configuration Difficulty: Intermediate

Configuring the CradlePoint:

- Step 1: Log into the router's Setup Page. For help with logging in please click here.

- Step 2: Click on Internet and select VPN Tunnels from the drop-down menu.

- Step 3: Click the Addbutton to create a new IPsec Tunnel Policy.

http://knowledgebase.cradlepoint.com/articles/Support/Accessing-the-Setup-Pages-of-a-Series-3-CradlePoint-router?c=WiPipe_Series_3&c=All_Products


- Step 4: Give the tunnel a name for easy identification.

- Step 5: Enter CradlePoint as the Local Identity

- Step 6: Enter NetVanta3120 as the Remote Identity.

- Step 7: Enter a Pre-Shared Key.

- Step 8: The Initiation Mode may be set to On Demand or Always On depending upon your needs.

- Step 9: Click Next to continue.

- Step 10: Enter the CradlePoint's local network address and netmask for the network(s) that will be made available

across the VPN into the Local Networks section.



- Step 12: Enter the Public IP Address (or hostname if applicable) of the WAN Interface of the NetVanta into

the Remote Gateway field.

- Step 13: Enter the NetVanta's local network address and netmask for the network(s) that will be made available

across the VPN into the Remote Networks section.



- Step 15: For IKE Phase 1, ensure the settings match those set in the NetVanta.

- Note: The settings used here are up to you, the only requirement is that they match on both the CradlePoint and

NetVanta. This applies for both Step 14 and Step 16.


- Step 17: For IKE Phase 2, again ensure the settings match those set in the NetVanta.


- Step 19: For Dead Peer Detection leave the default settings.

- Step 20: Click Finish to review your settings.


- Step 21: Verify the settings in the Tunnel Summary are accurate.

- Step 22: Click Yes to finalize your settings and continue.


- Step 23: At the VPN tunnels page you will now see your new IPsec Policy listed.

- Step 24: Click Enable VPN Service to start the VPN service on the CradlePoint.

Configuring the Adtran NetVanta:

- Step 1: Log into the Adtran's setup pages.

- Step 2: Click the Data tab.

- Step 3: Under VPN click on VPN Wizard.

- Step 4: At the wizards welcome page, click Next to continue.


- Step 5: Select Typical Settings.


- Step 7: In the VPN Peer Description field, enter a name for the remote CradlePoint.


- Step 9: Select the Adtran's public WAN interface in the Public Interface field.



- Step 11: Enter the CradlePoint's WAN IP in the Peer IP Address field.


- Step 13: Enter the CradlePoint's local network address and netmask for the network(s) that will be made available

across the VPN into the Remote Subnet and Remote Subnet Mask fields respectively.


- Step 15: Enter the Adtran's local network address and netmask for the network(s) that will be made available across

the VPN into the Local Networks section by either selecting it from the Use Network from field or by manually

entering it.



- Step 17: Enter the Pre-Shared Secret.

- Note: This should match the Pre-Shared Key from Step 7 of the CradlePoint configuration.


- Step 19: For the Remote ID Type field choose Allow Any Remote ID.

- Note: It is also possible to use an e-mail address or IP address in this field if preffered, as long as both sides match.

If you use an option other than Allow Any Remote ID for this field, it will need to match the Local Identity value from

Step 5 of the CradlePoint configuration.



- Step 21: For the Local ID Type field choose Domain Name. Leave the Local ID Value at the default value.

- Note: The Local ID Value should match the Remote Identity value from Step 6 of the CradlePoint configuration.


- Step 23: On the Confirm Settings page take note of the IKE & IPsec settings that the Netvanta selected by default.

These will need to match those set in the CradlePoint's configuration in Steps 17 and 19.

- Note: If these do not match, edit the CradlePoint's configuration to match those selected by the NetVanta. the IKE

Paramaters settings should match the IKE Phase 1 settings from Step 17 of the CradlePoint configuration and the

IPsec Paramaters settings should match the IKE Phase 2 settings from Step 19 of the CradlePoint configuration.


- Step 24: At the Wizard Complete page, click Exit to return to the main Netvanta UI.

cradlepoint to adtran netvanta vpn setup example42c984762d1e921cceae...configuring the adtran...

Documents