FEC Onlineservices
 
References regarding the use of the Bintec IPSec Secure Client


1. Installation
  • Before the installation of the Bintec IPSec Secure Client, it must be confirmed that no other VPN IPSec Client is installed.
  • We recommend using the current version of our IPSec Client. It is available in the download area of our website.
  • Before the installation of the Bintec IPSec Secure Client other Firewall applications should be deactivated or deinstalled. The IPSec Client has its own Firewall.


2. Backup of the configuration
To backup the configuration of the Bintec IPSec Secure Client you have to save or copy the file "ncpphone.cfg“ from the installation folder of the Bintec Secure IPSec Client.

With the function „Profile Settings Backup“ in the menu configuration, a copy of the configuration file is added to the installation folder of the Bintec Secure IPSec Client.

This configuration file contains the Pre-Shared-Key!


3. Configuration Locks / Authorization / View adjustment
With the option "Configuration Locks“, in the menu Configuration, the possibilities for users to change the configuration can be restricted.


To hide unnecessary information which may confuse the users it is recommended to restrain the view of the Bintec Secure IPSec Client to Connect and Disconnect functions (see example below). Thereby several items of the menu window can be hidden.



4. Automatic dial-up of the VPN IPSec tunnel
In the menu Configuration -> Profile Settings -> Configure - Line Management it is possible to automatize the "dial-up" with the option Connection mode:

following options are available:
  • Manual (manual dial-up and disconnection)
  • Automatic (automatic dial-up and disconnection)
  • variable (manual dial-up; after disconnect by timeout the tunnel is going to be established again automatically; after a manual disconnect a manual dial-up is necessary)



5. Configuration of remote network
It is recommended to define the destination exactly in the Bintec Secure IPSec client configuration. If there is no network defined in Configuration -> Profile Settings -> Configure - Remote Networks, all data will be sent via the tunnel to the router when a VPN connection is established.



6. Manual assignment of the IP address
For a reliable routing between the router and the IPSec Client, we recommend to configure a manual IP address in the menu: Configuration -> Profile Settings -> Configure - IP Address assignment  of the Bintec Secure IPSec Client. This IP address has to be configured in the IPSec configuration of the router (in the TrafficList and the Basic IP Settings of the IPSec Peers respectively). Please consider that this IP address may neither be out of the IP range of the remote LAN, nor out of the local network of the IPSec Client.



7. References regarding the local Identity (localID)
Different types of the "Local identity“ (local ID) which has to match with the "PeerID“ of the corresponding peer of the Bintec router are available. Please consider to choosing the correct type for the local ID. The following types are recommended: 
Full Qualified Username (Email address), Full Qualified Domain Name (Host name) or an IP address.


wg
© 2013 bintec elmeg GmbH