VPN Requirements

The VPN tunnel is required to provide us with access to your network and the printers on your network.

What is this used for ?

Key Printers are setup on the server to allow the server to print to those printers through automated services and is generally used for

Bulk Pick Notes
Labels (Rotation and Delivery)
Picking Notes
Delivery Notes
Tasting Notes
Parcel Carrier Labels
Shipment Notes

Other Printing

Other items are printed on demand and can be sent to one of the server printers OR you can use a local printer which is mapped through your RDP session to the server.

VPN Setup

We utilise Watchguard and Cisco firewalls at our end and your tunnel will need to connect to this firewall

Some firewall / routers are not 100% reliable connecting to VPN’s we have found these to include home grade firewall/routers and some cheap low end routers which give problems e.g. Draytek

What do we require

VPN connections need a little bit of input from both sides before we have finalised settings, what we need from the customer to set this up is usually

firewall make and model
external IP address and subnet
Internal LAN address and subnet

Sample Configuration

We will then generally share with you the pre-shared key, and the details of the connection and security is always similar to the below but can be changed based on whether the firewall can adopt these settings.

Ontech Firewall	85.13.221.226
Customer Firewall	xyz.xyz.xyz.xyz
Pre-Shared Key	* * * * * * * * * *
Mode	Main
Phase 1 Transform	SHA1-3DES
Phase 1 Key Group	Group 5
Phase 1 SA Life	8 Hours
Ontech Local Subnet	10.12.200.XX/29
Customer Local Subnet	Needs to avoid 10.12.x.x
Phase 2 Type	ESP
Phase 2 Authentication	SHA1
Phase 2 Encryption	AES 256-bit
Phase 2 Key Expiration	8 Hours