VPN and Server Configuration for NSE 3000 VPN Solution

Products Security & SD-WAN
1

Learn how to configure VPN server and client settings for the NSE 3000 with this easy step-by-step guide. Instructions include Windows, Linux, MacOS, iOS/iPadOS and Android environments.

VPN Server Configuration from cnMaestro

  1. From the configuration menu, select VPN and RADIUS Server.

  2. Select Enable inbuilt VPN Server option and enter the details for VPN Server. Make sure to select Enable 2FA if two-factor authentication is required.

    image
    image1016×198 12.2 KB

  3. Select Enable inbuilt RADIUS Server option and then click add new to add a RADIUS User.

    image
    image1053×209 12.3 KB

  4. Save the configuration.

  5. If you have enabled 2FA, install Google Authenticator app in your phone.

    1. Open the Authenticator app.

    2. Select Scan a QR code option.

    3. On cnMaestro, click the QR code icon for the RADIUS user you have added. You will also receive the same QR code on the user email ID provided.

      image

    4. Scan the QR code.

    5. An Account will be added on your authenticator app with a 6-digit code which changes periodically.

    6. Make sure to add this 6-digit code along with your VPN Password. The code should be added after the VPN Password you have set.

      If your VPN Password is xxxxxxxx and the code shown in the app is yyyyyy, the new Password
      is xxxxxxxxyyyyyy.

      image
      image336×626 30.8 KB
      image
      image336×626 11.7 KB

Windows

Registry Change

Open the Command Prompt as Administrator. Run the following command (that should be all on one line):

REG ADD HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent /v AssumeUDPEncapsulationContextOnSendRule /t REG_DWORD /d 0x2 /f

image
image1489×240 64.6 KB

Reboot your device once the registry changes are completed.

VPN Profile Configuration

  1. Go to Settings → Network & Internet → VPN.

    image
    image1108×576 35.5 KB

  2. Click Add a VPN connection.

  3. Choose Windows (built-in) option from drop down menu for VPN provider.

  4. Enter a Connection name of your choice.

  5. Enter your VPN Server IP in the Server name or address field.

  6. Select L2TP/IPsec with pre-shared key in the VPN type drop-down menu.

  7. Enter your VPN IPsec PSK in the Pre-shared key field.

  8. Select User name and Password option in Type of sign-in info drop-down menu.

  9. Enter your VPN Username in the User name field.

  10. Enter your VPN Password in the Password field.

    image
    image700×793 40 KB

  11. Click the Save button.

  12. A new VPN connection has been added.

    image
    image1152×641 39.8 KB

Adapter Settings

  1. Go to Control Panel → Network and Internet → Network and Sharing Center.

    image
    image748×350 54.9 KB

  2. Select Change adapter settings from the side menu.

  3. Right click on your VPN Connection and Select Properties.

    image
    image1404×740 38.7 KB

  4. Click Allow these protocols and select Unencrypted password (PAP).

    image

  5. Select OK.

Connecting to the VPN

  1. Go to Settings → Network & Internet → VPN.

  2. Select your VPN connection and click Connect.

    image
    image1231×683 52.5 KB

  3. Your device has been successfully connected to VPN.

Ubuntu Linux

Ubuntu 18.04 (and newer) users can install the network-manager-l2tp-gnome package using apt, then configure the IPsec/L2TP VPN client using the GUI.

Run the following command in the terminal.

sudo apt-get install network-manager-l2tp-gnome

  1. Go to Settings → Network → VPN. Click the + button.

    image
    image1155×637 37.5 KB

  2. Select Layer 2 Tunneling Protocol (L2TP).

    image
    image1095×607 28.6 KB

  3. Enter the VPN Name in the Name field.

  4. Enter Your VPN Server IP for the Gateway.

  5. Enter Your VPN Username for the User name.

  6. Enter Your VPN Password for the Password.

    image
    image1089×605 55.5 KB

  7. Click the IPsec Settings… button.

    image
    image1159×644 47.2 KB

  8. Check the Enable IPsec tunnel to L2TP host checkbox.

  9. Leave the Gateway ID field blank.

  10. Enter Your VPN IPsec PSK for the Pre-shared key.

  11. Expand the Advanced section.

  12. Enter aes128-sha1-modp2048 for the Phase1 Algorithms.

  13. Enter aes128-sha1 for the Phase2 Algorithms.

  14. Click Apply.

  15. Click OK, then click Add to save the VPN connection information.

  16. Turn the VPN switch ON.

MacOS

  1. Open System Preferences and go to the Network section.

    image
    image1200×750 101 KB

  2. Click the + button in the lower-left corner of the window.

  3. Select VPN from the Interface drop-down menu.

  4. Select L2TP over IPSec from the VPN Type drop-down menu.

  5. Enter name of the VPN in the Service Name field.

  6. Click Create.

    image
    image1200×750 89.5 KB

  7. Enter Your VPN Server IP for the Server Address.

  8. Enter Your VPN Username for the Account Name.

  9. Click the Authentication Settings button.

  10. In the User Authentication section, select the Password radio button and enter Your VPN Password.

  11. In the Machine Authentication section, select the Shared Secret radio button and enter Your VPN IPsec PSK.

  12. Click OK.

    image
    image1198×749 89.2 KB

  13. Check the Show VPN status in menu bar checkbox.

  14. Click the Advanced button and make sure the Send all traffic over VPN connection checkbox is checked.

    image
    image1198×749 78.7 KB

  15. Click the TCP/IP tab, and make sure Link-local only is selected in the Configure IPv6 section.

    image
    image1200×750 79.2 KB

  16. Click OK to close the Advanced settings, and then click Apply to save the VPN connection information.

  17. Click connect.

  18. The VPN has been connected.

    image
    image1207×754 94 KB

iOS/ iPadOS

  1. Go to Settings → General → VPN.

  2. Tap Add VPN Configuration…

    image
    image693×922 92.3 KB

    image
    image693×918 68.6 KB

  3. Click Type and Select L2TP.

  4. Enter the Description of your choice.

  5. Tap Server and enter Your VPN Server IP.

  6. Tap Account and enter Your VPN Username.

  7. Tap Password and enter Your VPN Password.

  8. Tap Secret and enter Your VPN IPsec PSK.

  9. Set the Send All Traffic switch to ON.

  10. Tap Done.

  11. Turn ON the VPN.

  12. The VPN has been connected.

    image
    image679×830 76.3 KB

    image
    image672×835 70.6 KB

Android

  1. Open Settings.

  2. Navigate to VPN.

    VPN settings location may vary depending on device manufacturer. The device represented here is a Samsung device.

  3. Tap : icon at top-right of screen.

    image
    image443×868 36.1 KB
    image
    image455×868 66.4 KB

    image
    image455×844 38 KB
    image
    image443×844 8.88 KB

  4. Enter the name of the VPN in the Name field.

  5. Select L2TP/IPSec PSK in the Type drop-down menu.

  6. Enter Your VPN Server IP in the Server address field.

  7. Enter Your VPN IPsec PSK in the IPSec pre-shared key field.

  8. Enter Your VPN Username in the Username field.

  9. Enter Your VPN Password in the Password field.

  10. Tap Save.

    image
    image379×795 64.2 KB
    image
    image451×876 56.9 KB

    image
    image453×876 19.1 KB

  11. A new VPN profile has been added.

  12. Click the VPN profile that has been created.

  13. Check the Save account information checkbox.

  14. Click Connect.

  15. The VPN has been connected.

VPN_2FA_Configuration_Guide.pdf (1.5 MB)