1. Confidential New OnCell Features VPN & GuaranLink

2. Confidential Basic IPSec Operation Step 1: Interesting traffic initiates IPsec Step 2: IKE Phase 1: Set up IKE SA Step 3: IKE Phase 2: Set up IPsec SA Step 4: Data transfer Step 5: IPsec terminates. Source: IPSec Simplified (http://www.netcraftsmen.net/resources/archived-articles/446-ipsec-simplified.html)http://www.netcraftsmen.net/resources/archived-articles/446-ipsec-simplified.html

3. Confidential OnCell VPN Specifications OnCell initiates VPN connection to VPN Server Site-to-Site topology IPsec VPN tunnel Manual Key/ESP, IKE/PSK DES/3DES/AES128/AES192/AES256 encryption MD5/SHA1 authentication IPsec NAT traversal, Anti-Replay, and PFS (Perfect Forwarding Secrecy).

4. Confidential Network Topology LAN 1 LAN 2 Internet IPSec VPN Tunnel OnCell G3110-HSDPA Router: D-link DIR-130 192.168.127.0/24 192.168.0.0/24 60.251.94.119 Static WAN IP VPN Gateway

5. Confidential D-Link Router Settings (1/2) OnCell’s WAN IP OnCell’s Local subnet D-Link’s Local subnet Passcode

6. Confidential D-link router settings (2/2)

7. Confidential IKE mode D-Link’s WAN IP D-Link’s local subnet OnCell local subnet Passcode Use OnCell’s WAN IP for identification IKE main mode DEC, 3DES, AES MD5, SHA-1 Group 1, 2, 5 Protection against duplicate packets Send keep alive packets

8. Confidential VPN established!