SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > LAN & WAN > Routers

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 06-16-2009, 12:12 AM
Miner Miner is offline
New Member
 
Join Date: Jul 2008
Posts: 21
Thanks: 1
Thanked 1 Time in 1 Post
Miner is just starting out
Default I'm stumped how to setup up my ZyXel home router for VPN endpoint

I have an ZyXel P-334 wired router. It's a SOHO device, and the product marketing description says it is VPN endpoint capable.

However, as I look in the users' guide, I cannot figure out what to do to enable those features. I've got a name setup at DynDNS.org, and have the P-334 configured to pass the router's WAN ip address to DynDNS. But after that I'm stuck.

What I hope to do is use Windows XP's VPN client when I travel away from home, say in a hotel, start up the XP VPN client, connect to the home router, and have all my internet activity routed from my laptop > P-334 router > pubic internet. I'm not interested in accessing any home computer or servers or printers, (maybe later, but not right now). I read on frequent traveler websites people do this a lot, and I'm trying it.

ZyXel's P-334 Product page, and User's Guide, in case anyone can get me pointed in the right direction.
Reply With Quote
  #2  
Old 06-16-2009, 09:27 AM
thiggins's Avatar
thiggins thiggins is offline
Mr. Easy
 
Join Date: May 2008
Posts: 9,283
Thanks: 166
Thanked 651 Times in 551 Posts
thiggins is just starting out
Default

The P-334 supports IPsec. The XP VPN client supports PPTP or L2TP connections.
You can set up XP to make an IPsec connection, but it's not easy.
How To: WinXP's IPsec client really can work!

You would be better off using a VPN client.
__________________
Tim Higgins
Managing Editor,SmallNetBuilder.com
Reply With Quote
  #3  
Old 06-16-2009, 10:40 AM
Miner Miner is offline
New Member
 
Join Date: Jul 2008
Posts: 21
Thanks: 1
Thanked 1 Time in 1 Post
Miner is just starting out
Default

Thanks. I realize this is vague, so some specific questions on the configuration in the router.

There are only 2 or 3 mentions of “endpoint “ in the documentation, and all are in the context of “NAT routers between the IPSec endpoints”, ie., not what I want to try. It appears they assume you know the right combination of rules and configuration settings to make this work.

1. I want to use ESP protocol as opposed to AH Protocol, correct?

2. I want Encapsulation mode set to Tunnel or Transport?

3. There is a statement “if the VPN tunnel terminates at the P-334’s LAN IP Address, then configure this…” and “If the if the VPN tunnel terminates at the P-334’s WAN IP Address, then…”.

Which one applies here? For the simple case away from home > VPN to router > internet browsing it terminates on the WAN ip address? If I also want to print to a home printer, (or later access resources on the home network), I presume it terminates on the LAN ip address.

4. Do I need to do set anything for any of the following fields (I was going to attach an image from my computer, but can't):

Local Address/Local Port Start
Local Port End
Remote Address Start
Remote Address End/Mask
Remote Port Start
Remote Port End

I think no, but it's not clear.

5. And finally, I don't see where to set anything to have the router give the XP VPN client an IP address after they make a successful connection. I do have to set something for this, right? Or does the router provide the XP client an IP address from it's DHCP function used for the WAN IP address range?
Reply With Quote
  #4  
Old 06-16-2009, 12:41 PM
thiggins's Avatar
thiggins thiggins is offline
Mr. Easy
 
Join Date: May 2008
Posts: 9,283
Thanks: 166
Thanked 651 Times in 551 Posts
thiggins is just starting out
Default

Setting up an IPsec VPN tunnel can be very frustrating. Even moreso if you don't have a matching IPsec client. I really suggest you get an IPsec client, preferably the Zyxel one since you are more likely to get support that way.

This Zyxel KB article might provide some clues on setup.

Have you tried contacting Zyxel support to ask if they have any IPsec tunnel setup examples?
__________________
Tim Higgins
Managing Editor,SmallNetBuilder.com
Reply With Quote
  #5  
Old 06-16-2009, 03:18 PM
Miner Miner is offline
New Member
 
Join Date: Jul 2008
Posts: 21
Thanks: 1
Thanked 1 Time in 1 Post
Miner is just starting out
Default

That ZyXel client is $65 for one copy. Yikes. It's geared towards corporate & small business sales. I'm gonna invest some brain power and elbow grease first. I read about other people doing what I want without having to resort to buying an individual client.

That is a good idea to ask ZyXel support for setup examples.

The terminology and wording is part of my problem here. Is 'IPsec tunnel setup' the equivalent words for 'endpoint'? ZyXel 's manual has a section on 'TeleCommuters sharing one VPN rule', and I'll start looking over this again. And so I think these three descriptions might all be more or less the same.
Reply With Quote
  #6  
Old 06-16-2009, 04:06 PM
thiggins's Avatar
thiggins thiggins is offline
Mr. Easy
 
Join Date: May 2008
Posts: 9,283
Thanks: 166
Thanked 651 Times in 551 Posts
thiggins is just starting out
Default

Suit yourself on buying the IPsec client.

A VPN endpoint is where the tunnel originates or terminates. In your case, one endpoint would be the P-334 and the other the PC running the IPsec client.
__________________
Tim Higgins
Managing Editor,SmallNetBuilder.com
Reply With Quote
  #7  
Old 06-16-2009, 04:54 PM
Miner Miner is offline
New Member
 
Join Date: Jul 2008
Posts: 21
Thanks: 1
Thanked 1 Time in 1 Post
Miner is just starting out
Default

Thanks for the assist above. I e-mailed ZyXel support to ask for an example.

BTW, on the 1st page in the link in your post above, it says "... but many other inexpensive VPN endpoint routers have tunnel throughput in the 400 - 800kbps range vs. the BEFSX41's 2.5Mbps - a limitation you'd definitely notice."

How would I find out if this is a limitation in the P-334?
Reply With Quote
  #8  
Old 06-16-2009, 11:52 PM
claykin claykin is offline
Very Senior Member
 
Join Date: Sep 2008
Posts: 996
Thanks: 4
Thanked 21 Times in 19 Posts
claykin is just starting out
Default

No better way than to test for yourself. The Zyxel VPN client is an OEM version of The Greenbow VPN client.

Visit www.thegreenbow.com and download the 30 day trial version. Greenbow also has setup guides to help you get it going. They've got a few Zyxel boxes listed and if you poke around you'll likely find one that has a similar interface to the P-334.

If you want to purchase The greenbow VPN you can save a few $ by purchasing from one of their resellers. Click here: http://www.shopunitednetworks.com/

P.S. I've been using Greenbow VPN for years and it works well. No complaints here!
Reply With Quote
  #9  
Old 06-30-2009, 11:50 AM
Miner Miner is offline
New Member
 
Join Date: Jul 2008
Posts: 21
Thanks: 1
Thanked 1 Time in 1 Post
Miner is just starting out
Default

Gents, thanks for the suggestions. I think I'm giving up on this exercise of using the built in Windows client with the Zyxel router I have.

If I understand it correctly, the router requires both itself and the client to have static IP addresses.

I can handle the router not having one (ie., looking it up manually via DYNdns when I'm away from home), but I no-can-do with the PC client needing a static address. How would I ever know I address I'm going to get when I use a coffeeshop or hotel's wireless.
Reply With Quote
  #10  
Old 07-16-2009, 08:40 AM
ted ted is offline
New Member
 
Join Date: Jul 2009
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
ted is just starting out
Default

One option could be to use this free client. There is also a guide provided to show how to use with a Zywall.

http://www.shrew.net/software
http://www.shrew.net/support/wiki/HowtoZywall


wbr
Ted
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


All times are GMT -4. The time now is 04:58 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  362
L&LD  122
john9527  118
htismaqe  94
azazel1024  92
stevech  86
huotg01  76
jegesq  76
watusi  54
ColinTaylor  54
RMerlin  6393
john9527  502
stevech  357
ryzhov_al  298
TeHashX  263
L&LD  255
RogerSC  205
sinshiva  149
sfx2000  137
joegreat  128
Most Viewed Threads* Hottest Threads*
Old New AC68...  9437
Old Why not...  8231
Old ASUS RT-N66U...  5684
Old RT-AC66U...  3429
Old Why ASUS?  2365
Old NAS...  1836
Old Help Plz:...  1598
Old Asus...  1494
Old OpenVPN...  1405
Old Remote...  1354
Old Why not...  81
Old Remote...  45
Old New AC68...  36
Old Whats going...  27
Old Extension...  26
Old The future...  26
Old RT-N66U...  26
Old ASUS RT-N66U...  25
Old What are the...  25
Old OpenVPN...  24


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.