IPsec Client VPN

Introduction

IPSec Client VPN is security solution designed to facilitate secure, encrypted communications between remote client devices and the corporate network. It leverages the IPSec (Internet Protocol Security) standard to ensure the privacy and integrity of data transmitted over public networks.

How to Confiugre ESG IPSec Client VPN

To enable IPSec Client VPN, navigate to Configure > Gateway > Client VPN > IPSec page and toggle the "Enable" option to enabled.

The following client VPN options can be configured:

  • Hostname: This is the hostname of the EnGenius Gateway that client VPN users will use to connect to. If you have enabled DDNS service in your WAN settings, then the registered DDNS FQDN hostname is displayed which can be resolved to the Primary WAN public IP address of the EnGenius Security Gateway. If the DDNS service is not enabled or the DDNS update fails then the Primary WAN public IP address is displayed.

  • VPN Client Subnet: The subnet that will be used for client VPN connections. This should be a private subnet that is not in use anywhere else in the network. The EnGenius Gateway will be the default gateway on this subnet and will route traffic to and from this subnet.

  • DNS server: The server's VPN clients will use to resolve DNS hostnames. Choose from Google Public DNS or specify custom DNS servers by IP address.

  • WINS server: If VPN clients should use WINS to resolve NetBIOS names, select Specify WINS Servers from the drop-down and enter the IP addresses of the desired WINS servers.

  • Pre-Shared Key: The shared secret that will be used to establish the client's VPN connection.

  • Authentication type: Use this option to authenticate Client VPN users with the local ESG VPN User database or select Custom RADIUS to use external RADIUS servers for authentication.

How to configure a client VPN connection on various client device platforms

For detailed instructions on how to configure a client VPN connection on various client device platforms. please refer to the following instructions

Last updated

Was this helpful?