[HowTo] Fritz!Box-Fernzugang und ShrewSoft VPN Client - Schritt für Schritt

[B]IPhone / iPod touch / iPad VPN-Konfiguration[/B]

Wählen Sie auf dem Homescreen Ihres iPhones, iPod touch oder iPad das Symbol "Einstellungen".
"Allgemein" > "Netzwerk" > "VPN" > "VPN hinzufügen"


Wählen Sie als VPN-Betriebsmodus "IPSec".
Tragen Sie in die Felder folgende Angaben ein:


Beschreibung :   7271.daheim.de 
                 (Die Beschreibung kann frei gewählt werden.)
Server:          7271.daheim.de
Account:         E-Mail-Adresse
Kennwort:        cdUEb998Gc
                 (Das Kennwort wird bei jedem VPN-Verbindungsaufbau abgefragt.)
Zertifikat verwenden ist deaktiviert
Gruppenname:     E-Mail-Adresse
Shared Secret:   cdUEb998Gcbx%bh$paecfe3c318zi


Geben Sie bei "Proxy" "aus" an.


Beenden Sie die VPN-Einrichtung mit "Sichern".

[B]/* * C:\Users\User\AppData\Roaming\AVM\FRITZ!Fernzugang\7271_daheim_de\fritzbox_7271_daheim_de.cfg[/B]
[B] * Wed Feb 15 01:10:28 2017[/B]
[B] */[/B]


vpncfg {
        connections {
                enabled = yes;
                conn_type = conntype_user;
                name = "E-Mail-Adresse";
                always_renew = no;
                reject_not_encrypted = no;
                dont_filter_netbios = yes;
                localip = 0.0.0.0;
                local_virtualip = 0.0.0.0;
                remoteip = 0.0.0.0;
                remote_virtualip = 192.168.178.201;
                remoteid {
                        key_id = "E-Mail-Adresse";
                }
                mode = phase1_mode_aggressive;
                phase1ss = "all/all/all";
                keytype = connkeytype_pre_shared;
                key = "cdUEb998Gcbx%bh$paecfe3c318zi";
                cert_do_server_auth = no;
                use_nat_t = yes;
                use_xauth = yes;
                xauth {
                        valid = yes;
                        username = "E-Mail-Adresse";
                        passwd = "cdUEb998Gc";
                }
                use_cfgmode = yes;
                phase2localid {
                        ipnet {
                                ipaddr = 0.0.0.0;
                                mask = 0.0.0.0;
                        }
                }
                phase2remoteid {
                        ipaddr = 192.168.178.201;
                }
                phase2ss = "esp-all-all/ah-none/comp-all/no-pfs";
                accesslist = 
                             "permit ip 192.168.178.0 255.255.255.0 192.168.178.201 255.255.255.255";
        }
        ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500", 
                            "udp 0.0.0.0:4500 0.0.0.0:4500";
}




// EOF

[B]**** CFGFILE:vpn.cfg[/B]
[B]/*[/B]
[B] * /var/flash/vpn.cfg[/B]
[B] * Wed Feb 15 01:11:12 2017[/B]
[B] */[/B]


vpncfg {
        connections {
                enabled = yes;
                conn_type = conntype_user;
                name = "E-Mail-Adresse";
                always_renew = no;
                reject_not_encrypted = no;
                dont_filter_netbios = yes;
                localip = 0.0.0.0;
                local_virtualip = 0.0.0.0;
                remoteip = 0.0.0.0;
                remote_virtualip = 192.168.178.201;
                remoteid {
                        key_id = "$$$$W21IBVRWQYJN1Y6Y2YV26CUL5LPAFBELC3O5QFOD6V1TZUZC6RIZUEPOQZV2EJBQGKBPN6RVKCGGQAAA";
                }
                mode = phase1_mode_aggressive;
                phase1ss = "all/all/all";
                keytype = connkeytype_pre_shared;
                key = "$$$$OT3N5OSDJ6YDPT5HNVK4SS4Y1LBH3LCI41T14XBEFOSJ1U5RNQWRZ6EW4R1OVJL4CHLHXOGJE2RE1665O6ZZYFCWGKR55B53QS4ZI5QA";
                cert_do_server_auth = no;
                use_nat_t = yes;
                use_xauth = yes;
                xauth {
                        valid = yes;
                        username = "$$$$LS4A4BOCUHPDNGN4OHOAYYIT2OXAQRICKGTFICWAMNQWPJ2J2ZWONBRSDJLLFVCJYMQKQR6QH2NKEAAA";
                        passwd = "$$$$4AEOMRGC5TEYJFNIXMXWKLALOJ5HM3FPXU5B26Y3L1RIQCADMIWNSO5QKR5APGWB5BA4ZCSC23VRWAAA";
                }
                use_cfgmode = yes;
                phase2localid {
                        ipnet {
                                ipaddr = 0.0.0.0;
                                mask = 0.0.0.0;
                        }
                }
                phase2remoteid {
                        ipaddr = 192.168.178.201;
                }
                phase2ss = "esp-all-all/ah-none/comp-all/no-pfs";
                accesslist = 
                             "permit ip 192.168.178.0 255.255.255.0 192.168.178.201 255.255.255.255";
        }
        ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500", 
                            "udp 0.0.0.0:4500 0.0.0.0:4500";
}