The next step is to create a user which will connect to the tunnel. Whenever a device connects to your tunnel, it will be assigned an IP address from this pool.įinally, go the Advanced tab and set the Connect mode to Manual and Inactivity timeout to 0 seconds. Next, you’ll have to specify the Virtual IP Address Pool. Here under Allowed Resources you can specify which IP addresses are allowed to connect through the tunnel.

Under Phase 2 Settings, seelct PFS and choose Diffie-Hellman Group 1.

Under Phase 1 Settings, select Authentication as SHA1 and Encryption as 3DES.

Select Use the passphrase of the end user profile as the pre-shared key.

Make the following changes as shown in the image below. This is the IP address that you use to connect to your firewall from the Internet. Next, enter the passphrase and enter your firewall’s external IP address. You can also set it to authenticate it with your domain, but for this tutorial we will use the firewall as the authentication server. Type in a Name and select Authentication Server as Firebox-DB.

Administrative access to the firewall (of course).įire up your browser and navigate to the web interface of your firewall? If your firewall’s IP address is 192.168.1.1, then type in the URL bar.Īfter logging in, go to VPN > Mobile VPN with IPSec.An environment where a WatchGuard firewall is installed and running.Note: While this guide was created for Firebox M300, it should work with other WatchGuard XTM devices as well. It’s free and you can download it from their official website. Unless you want to go this route, I would suggest using the Shrew Soft IPSec VPN Client. The new version of the IPSec client needs a paid subscription license. Old versions of this WatchGuard IPSec Mobile VPN Monitor were free, but they do not work on Windows 10. In my opinion, you are better off using this client than the WatchGuard IPSec Mobile VPN Monitor. It will also show you how to install and configure the Shrew Soft IPSec VPN Client. It’s a pretty straightfoward process, however it took me quite a while to figure out initially. This guide will show you how to enable Mobile VPN with IPSec for WatchGuard Firebox M300. How to set up Shrew Soft IPSec VPN Client for WatchGuard

Shrew soft vpn client download chip