IPsec XAuth from iOS to Vigor Router

IPsec is very secure and delivers great performance, and since 2018, Vigor Router also provides IPsec Xauth. If you are not comfortable with every VPN client using the same pre-shared key, you can use IPsec Xauth instead. IPsec Xauth authenticates the VPN clients not only by a pre-shared key but also a unique username and password. This article demonstrates how to set up Vigor Router as a VPN server for IPsec Xauth clients, and the configuration required on iOS to establish the VPN with Smart VPN client.

Setup on Vigor Router

1. Go to VPN and Remote Access >> IPsec General Setup, and enter Pre-Shared Key.

2. Go to VPN and Remote Access >> Remote Dial-in User, and click on an available index:

• Check Enable this account
• Give Username and Password
• Make sure IPsec Xauth is checked at Allow Dial-In Type

3. You may check if the client is online from VPN and Remote Access >> Connection Management page.

1. Go to User Management >> User Profile and click Add,

• Enter Username and Password
• Check Enable
• Select "Enable" for Xauth at IPsec User Setting

2. Go to VPN and Remote Access >> IPsec General Setup, Enter IPsec User Preshared Key. Then click Apply.

3. Go to VPN and Remote Access >> VPN Profile and add a profile as follows:

• Give a Profile name
• Check Enable
• Select "Enable" For Remote Dial-In User
• Enter the LAN IP of the router at Local IP / Subnet Mask

4. You may check if the client is online from Remote Access >> Connection Management page.

The iOS Setup

1. Run Smart VPN client and add a profile as follows:

• Select "IPsec Xauth" for Type
• Give the name of the profile
• Enter the router's WAN IP address or domain at Server
• Enter Account and Password
• Enter the IPsec Xauth pre-shared key in Secret

2. To start the VPN connection, switch on the profile.