Wireless Security.pdf - PDF Archive

526 Chapter 21
can provide. The W-RV54G offers all of the security features of other access points, but
also provides the capability of setting up an IPSec VPN tunnel. A VPN tunnel allows
two points to establish an encrypted session using a selected protocol. Other protocols
can then be transmitted through this tunnel. A basic example of this is a Secure Shell
(SSH) tunnel. A firewall can be configured to allow only SSH traffic (port 22) inbound.
The client can then tunnel other traffic, such as HTTP (port 80) through the established
SSH tunnel. This both encrypts the HTTP traffic, and removes the requirement to allow
port 80 traffic through the firewall. Additionally, because some form of authentication
(passphrase, key exchange, or both) is required to establish the initial SSH tunnel,
additional user level access controls are in place.
This section describes the process of setting up an IPSec tunnel to utilize the VPN
features on the WRKV54G. First, we discuss the steps that must be taken on Windows
2000 or XP clients to prepare for VPN access. Then, the configuration steps that are
required on the WRKV54G are detailed.
21.4.1 Preparing Windows 2000 or XP Computers for Use with the WRV54G
There are four steps that you need to take to configure your Windows 2000 or XP
computer to establish a VPN tunnel with the WRV54G.
1. Create an IPSec policy.
2. Build two filter lists.
3. Establish the tunnel rules.
4. Assign the IPSec policy to the computer.
21.4.1.1 Creating an IPSec Policy
Click Start | Run and type secpol.msc in the Open textbox to open the Local Security
Settings screen, as seen in Figure 21.28 .
Right-click IP Security Policies on Local Computer and select Create IP Security Policy to
open the IP Security Policy Wizard. Click Next on the IP Security Policy Wizard window.
Enter a name for your security policy in the Name textbox (as shown in Figure 21.29 ) and
click Next .
www.newnespress.com