1. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 1 Vodafone MachineLink 3G VPN functionality Feature Spotlight

2. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 2 What is the VPN function of the MachineLink 3G? A virtual private network (VPN) is a secure connection between two or more endpoints on a network. There are two types of VPN scenarios: Site to site VPN where data is encrypted from one VPN gateway to another over a third party network such as the internet Remote Access VPN where a secure connection is established between an individual computer and a VPN gateway. The MachineLink 3G Router supports the following VPN protocols: IPSec OpenVPN PPTP GRE

3. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 3 IPSec IPSec is a VPN protocol operating at the internet protocol (IP) layer of the internet protocol suite. It can be used to secure data flow in the following configurations: Host-to-host Network-to-network Network-to-host OpenVPN OpenVPN is an open source virtual private network program for creating point-to-point or server-to-multi-client encrypted tunnels between host computers. It can traverse network address translation (NAT) and firewalls and provides 3 methods of authentication: Certificate Pre-shared key Username/password

4. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 4 PPTP-Client GRE The Point-to-Point Tunnelling Protocol (PPTP) is a method for implementing virtual private networks using a TCP and GRE tunnel to encapsulate PPP packets. PPTP operates on Layer 2 of the OSI model and is included on Windows computers. The Generic Route Encapsulation (GRE) protocol is used in addition to Point-to-Point Tunnelling Protocol (PPTP) to create VPNs (virtual private networks) between clients and servers or between clients only. Once a PPTP control session establishes the VPN tunnel GRE is used to encapsulate the data or payload.

5. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 5 What can you do with VPNs? With respect to the MachineLink 3G Router, the benefits of using a VPN include: Security – All traffic in and out of the router is encrypted (except when using GRE) ensuring the integrity of your network. Common network – the devices can be placed in the same subnet meaning that they can be more easily administered. Anonymity – because the router is connecting to a VPN gateway, any remote connections it may make appear to come from the gateway. Reduce maintenance costs and time – when you have multiple routers on the same network, you can save time and money by reducing the effort required to service them.

6. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 6 How to configure IPSec

7. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 7 How to configure IPSec (continued) Select encapsulation, encryption and hash types

8. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 8 How to configure IPSec (continued) Enter Dead peer detection keep alive time and timeout, re-key interval, SA life time and then select the key mode.

9. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 9 How to configure OpenVPN server

10. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 10 How to configure OpenVPN server Enter the server details. All fields are required. When all fields have been completed, click Generate CA certificate button

11. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 11 How to configure OpenVPN server If using certificate authentication, enter the details for at least one certificate and click Generate. After its generated, you can use the Download button to download the certificate file. Certificates may be revoked in the future if they are no longer necessary or security has been compromised. Enter the remote network address and network mask if you know them.

12. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 12 How to configure OpenVPN client To use certificate authentication, scroll to the bottom of the screen and use this section to upload the certificate first.

13. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 13 How to configure OpenVPN client (continued) Select uploaded certificate from drop down list. Certificate information is displayed.

14. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 14 How to configure OpenVPN P2P

15. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 15 How to configure OpenVPN P2P (continued) Enter the IP address and subnet mask of the remote network On both server and client sides, click the Generate button to create a secret key to be shared with the other router. Use the Client secret key upload field to upload the secret key file from the other router.

16. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 16 How to configure the PPTP client

17. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 17 How to configure the PPTP client (continued) Click Save to complete the configuration.

18. C3 confidentiality classificationIntegrated M2M Terminals Introduction Vodafone MachineLink 3G v1.0 18 For more information For more information on VPN setup, a whitepaper is available on the NetComm Wireless website at http://vodafone.netcommwireless.com