I have been task with setting up a VPN connection between my main office and a remote site. The main purpose of the VPN is to set up a VoIP phone. We are using a BCM50e v3.0 from Nortel for our phone system and that is the system that will be assigning the number to the remote phone.
This is going to be a tryout so the equipment I will be implementing is temporary and they are as follow:
1. Nortel Contivity 221 (remote router)
2. Nortel Contivity 1100 (main office router)
I am new to the whole concept of routers and VPNs. The little I know is from killing my self by reading every possible guide for the two routers I mention above. I have an idea of how to configure them but I dont know where to start and how to wire the routers.
This is what I have done so far:
On the Nortel Contivity 1100
1. Configured the Private LAN interface from the Console Port
2. I gave the router a new management IP Address = 192.168.1.1
3. When into the Interface Menu and set up the following IPs:
a. Slot 0, Port 1, Private LAN = 192.168.1.2 255.255.0.0
b. Slot 1, Port1, Public LAN = empty
c. Slot 3, Port 1, Public LAN = 206.193.x.x 255.255.255.248(ISP gateway IP) (not sure if that is was the right thing to do)
4. Logged to the WebGUI
5. I went under Profile à Branch Office and created a Branch Group under the /Base which I called Branch Group (I know very original)
6. I then configure the following:
a. Group Name: /Base/Branch Group
b. Connection Name: To Remote Branch
c. Control Tunnel: Disabled
d. Tunnel Type: IPSec
e. Connection Type: Responder
f. Enable: checked
g. Filter: permit all
h. Authentication: Text Pre-Shared Key
i. Initiator ID: bcm50test
j. Text Pre-Shared Key: *********
k. MTU: Enable
l. MTU Value: 1788
m. NAT: none
Here is where I am starting to pull my hair!!!!
IP Configuration
Is it going to be Static or Dynamic? I have it set up as static.
It is asking me for the Local Networks and Remote Networks.
What do I need to enter for my local network? Would that be my the IP range I want my remote branch to see?
What do I enter for my Remote Network? Considering the fact that the ISP provider for the remote branch is assigning IP through DHCP so I will not know it.
Will I need to enter 0.0.0.0
I am trying to set up an Asymmetric Branch Office Tunnel
So my remote site will be the Initiator(C221) and the main office will be the Responder(C1100)
The Contivity 221 is setup as follow:
1. Connection Type: Branch Office
2. Active is checked
3. Name: ToMainOffice
4. Key Management: IKE
5. Negotiation Mode: Aggressive
IP Policy I have no idea what IP should use.
6. Local ID Type: DNS
7. Content: bcm50test
8. My IP Address: 0.0.0.0 (ISP DHCP)
9. Peer ID Type: IP
10. Content: empty
11. Secure Gateway Address: I used the main office IP gateway given to me by my ISP. Not sure if is right!!
12. Encapsulation Mode: Tunnel
Can someone tell me how to configure the right way I am very sure that I am messing up somewhere.
