Draytek Vigor2920n User Manual page 223

Always On
Pre-Shared Key
Digital Signature (X.509) Click Digital Signature to invoke this function. Use the
IPSec Security Method
WAN1 First - While connecting, the router will use
WAN1 as the first channel for VPN connection. If
WAN1 fails, the router will use another WAN interface
instead.
WAN1 Only - While connecting, the router will use
WAN1 as the only channel for VPN connection.
WAN2 First - While connecting, the router will use
WAN2 as the first channel for VPN connection. If
WAN2 fails, the router will use another WAN interface
instead.
WAN2 Only - While connecting, the router will use
WAN2 as the only channel for VPN connection.
WAN3 First - While connecting, the router will use
WAN3 as the first channel for VPN connection. If
WAN3 fails, the router will use another WAN interface
instead.
WAN3 Only - While connecting, the router will use
WAN3 as the only channel for VPN connection.
Check to enable router always keep VPN connection.
IKE Authentication Method usually applies to those
are remote dial-in user or node (LAN to LAN) which
uses dynamic IP address and IPSec-related VPN
connections such as L2TP over IPSec and IPSec tunnel.
Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key-Confirm the pre-shared key.
drop down list to choose one of the certificates for using.
You have to configure one certificate at least previously
in Certificate Management >> Local Certificate.
Otherwise, the setting you choose here will not be
effective.
Peer ID – Choose the peer ID selection from the drop
down list.
Local ID – Choose Alternative Subject Name First or
Subject Name First.
Medium - Authentication Header (AH) means data will
be authenticated, but not be encrypted. By default, this
option is active.
High - Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
211
Vigor2920 Series User's Guide