====== IPsec VPN using Shrewsoft VPN client ======

  - Download your certificates from <nowiki>https://vpn.plutex.de/IPSEC-A_...</nowiki>. Complete the URL with your VPN username and login with your VPN username and password.
  - [[https://www.shrew.net/download|Download the Shrewsoft client]] and install it.
  - In the "General" tab, enter "zuul02.plutex.de" as host.
  - In the "Authentication" tab, choose "Mutual RSA + XAuth" as "Authentication Method".
  - In the "Local Identity" tab, choose "ASN.1 Distinguished Name" as "Identification Type" and tick the checkbox "Use the subject in the client certificate".
  - In the "Remote Identity" tab, choose "Fully Qualified Domain Name" as "Identification Type", and again enter "zuul02.plutex.de" as "FQDN String".
  - In the "Credentials" tab, select the "PLUTEXCA.cert.pem" file you downloaded in step 1 as "Server Certificate Authority", and select the "IPSEC-A_....p12" file you also downloaded as "Client Certificate File" as well as "Client Certificate Key File".
  - In the "Phase 1" tab, choose "main" as "Exchange Type".