Moxa EDR-810-VPN-2GSFP [133/139] L2tp for remote user maintenance

Industrial Secure Router User's Manual Virtual Private Network (VPN)

9-13

VPN Plan

• All communication from the Central site network (100.100.1.0/24) to the Remote site Network

(100.100.3.0/24) needs to pass through the VPN tunnel.

• Intranet Network is 100.100.2.0/24

• The configuration of the WAN/LAN interface for 2 Industrial Secure Routers is shown in the following table.

Configuration Industrial Secure Router (1) Industrial Secure Router (2)

EDR-G903

Interface Setting

WAN IP 100.100.2.1 100.100.2.2

LAN IP 100.100.1.1 100.100.3.1

Based on the requirement and VPN plan, the recommended configuration for VPN IPSec is shown in the

following table

Configuration Industrial Secure Router (1)

Industrial Secure Router (2)

Tunnel Setting Connection Type Site to Site Site to Site

Remote VPN

gateway

100.100.2.2 100.100.2.1

Startup mode Wait for Connection Start in Initial

Local Network /

Netmask

100.100.1.0 /

255.255.255.0

100.100.3.0 /

25.255.255.0

Remote Network /

Netmask

100.100.3.0 /

25.255.255.0

100.100.1.0 /

255.255.255.0

Key Exchange Pre-Shared Key 12345 12345

Data Exchange Encryption / Harsh 3DES / SHA1 3DES / SHA1

L2TP for Remote User Maintenance

The following example shows how a Roaming user uses L2TP over IPSec to connect to the remote site network.