Lan To Lan - Draytek VIGOR2925 SERIES User Manual

IKE Authentication
Method
IPSec Security Method
After finishing all the settings here, please click OK to save the configuration.
4 . 1 2 . 6 L A N t o L A
4 . 1 2 . 6 L A N t o L A
Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
You may set parameters including specified connection direction (dial-in or dial-out),
connection peer ID, connection type (VPN connection - including PPTP, IPSec Tunnel, and
L2TP by itself or over IPSec) and corresponding security methods, etc.
The router supports up to 64 VPN profiles simultaneously. The following figure shows the
summary table.
The following figure shows the summary table according to the item (All/Trunk) selected for
View.
This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy when you specify the IP address of
the remote node. The only exception is Digital Signature
(X.509) can be set when you select IPSec tunnel either with
or without specifying the IP address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to
invoke this function and type in the required characters
(1-63) as the pre-shared key.
Digital Signature (X.509) – Check the box of Digital
Signature to invoke this function and Select one predefined
Profiles set in the VPN and Remote Access >>IPSec Peer
Identity.
This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node.
Check the Medium, DES, 3DES or AES box as the security
method.
Medium-Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is invoked. You can uncheck it to disable it.
High-Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
Local ID (Optional)- Specify a local ID to be used for
Dial-in setting in the LAN-to-LAN Profile setup. This item
is optional and can be used only in IKE aggressive mode.
N
N
395
Vigor2925 Series User's Guide