Setting up site-to-site on D-Link DIR-130/330

Note: If your device/service supports SHA256 and DH group 14, it is recommended to use these settings instead.

1. Open your web browser and type in the IP address of your D-Link router management console (192.168.0.1 by default). Enter the username (admin by default) and password (blank by default), and then click OK.
2. Click on SETUP and select VPN SETTINGS. Choose IPSec from the ADD VPN PROFILE dropdown menu and click Add.

3. Configure the Site-to-site VPN connection as follows:

• Check the Enable box
• Name: NordLayer
• Local Net /Mask: your local network subnet and mask
• Remote IP: set Site to Site and enter the public IP address of your NordLayer dedicated server
• Remote Local LAN Net /Mask: 10.6.0.0/20
• Authentication: Select Pre-shared Key and enter the key you would like to use
• Encapsulation Mode: Tunnel

Phase 1 leave settings as they are apart from:

• DH Group: 14
• Cipher: AES-256
• Hash: SHA2-256
• IKE Lifetime: 3600

Phase 2 leave settings as they are apart from:

• PFS DH Group: 14
• Cipher: AES-256
• Hash: SHA2-256
• IKE Lifetime: 28800

4. Click Save Settings.

Ending note:

In order to finalize the site-to-site setup on our end, please provide these values via Site-to-site request from in the NordLayer Control Panel:

• Pre-shared key - you can generate it or we can provide it
• Encryption  details (AES, SHA and DH group) - AES256, SHA256 and DH group 14 are recommended (also must support IKEv2)
• Remote gateway/router public IP (must be reachable while connected to the dedicated server)
• Remote subnet and mask (the subnet is used in your local network)

Note: In case you are experiencing different results, make sure that you have you carefully gone through all the steps. Having said that, in case the issue persists please feel free to contact our 24/7 customer support team.