How to Use SSL VPN?

How to Use SSL VPN?

This document introduces how to set up Vigor Router to be a SSL VPN server, and how to
establish a SSL VPN Tunnel and use SSL Applications on SSL clients.

A. Configuration on Vigor Router

1. Create SSL VPN User Account: Go to SSL VPN >> User Account, click on an Index
number to add/edit an account.

/
 a. Enable this account.
b.
c. Make sure SSL Tunnel is enabled for Allowed Dial-in Type.
d.
2. Add the account to a User Group: Go to SSL VPN >> User Group, click on an Index
number to add/edit the User Group.

/
 a.
b. Enable Local User DataBase in Authentication Methods.

c. Click on the User Account we created in Step1 from Available User Accounts.
d. Click ">>" to move it to Selected User Accounts.

e. Click OK to save.
3. Note that by default, Vigor Routers use port 443 for SSL VPN service, which is the same as
HTTPS services. If HTTPS services is enabled as well, you may change the SSL VPN port
at SSL VPN >> General Setup.

B. Use a Browser to Establish a SSL VPN Tunnel

For SSL VPN Client, please make sure Java is installed on your computer.
1. Open a Browser and enter "https://" with Vigor Router's WAN IP in address bar.
Enter Username and Password and click Login.

Note: If you have change the port for SSL VPN, please add ":" with port number at the
end of WAN IP.

/
2. After logging in, go to SSL Tunnel Tab, read the Warning Message and click Connect.

3. Run all the programs it requires. And after the connection established, there will be a
DraySSL Tunnel Client window pop up.

/
Note: If you couldn't establish a connection successfully, please use the JAVA Security
Configuration described in Part C.

C. JAVA Security Configurations for SSL VPN Client

If you are having trouble using the SSL VPN services, please modify the Java Security
Configuration.
1. Open Java Control Panel: For Windows users, go to Control Panel and click on Java.

2. In Advanced Tab, enable "Show site certificate from server even if it is valid" and "Use TLS
1.0/2.0/3.0", but disable "Use SSL 3.0"

/
3. In Security Tab, set Security Level to Medium and click Edit Site List to add the Vigor
Router's IP to Exception Site List.

/
4. Edit the Exception Site List:

a. Click Add.

b. Enter "https://" with Vigor Router's WAN IP. (add ":" with port number at the end of the
IP if SSL VPN does not use the default port 443.)
c. Click OK to save.
/
D. Use Smart VPN Client to Establish a SSL VPN Tunnel
You may also use Smart VPN Client to start a SSL VPN Connection.
1. Install and run Smart VPN Client, click Insert to create a new VPN profile.

a.
b. Enter Vigor Router's WAN IP in VPN Server/HOST Name field.
c.
d. Click OK to save the profile.
2. Leave Authentication Method as AUTO, select "Automatically get IP address & DNS server"
and click OK.

/
3. Select VPN profile, and click Connect to establish the SSL VPN connection.

4. Click OK to confirm User Name and Password.

/
 5. If connection is up, Smart VPN Client Status will show Connected.

E. Connect to the remote server with SSL application

Vigor router support three different SSL applications, Remote Desktop Protocol, Virtual
Network Computing, and Samba Application. In this note, we take Remote Desktop Protocol
for example.

/
1. On Vigor Router, go to SSL VPN >> SSL Application, and click on an index number to
create/edit a new Application Profile.

a.
b.
c. Click OK to save.

2. Go to SSL VPN >> User Group, and click on an Index number to create/edit a new User
Group Profile.

/
 a.
b.
c.
d.
e.
f. Click OK to save.
3. From the client side, open a browser and access the Vigor router to log in the SSL server.

/
 4. Go to SSL Application Tab, and click the Connect to establish SSL remote access.

5. After connecting successfully, it will display the desktop of remote server.

PRODUITS

Modem xDSL

Routeurs
/