Draytek Vigor 3220 SERIES User Manual page 258

Table of Contents

Advertisement

246
the User Name and Password of remote dial-in user
below.
IPsec Tunnel- Allow the remote dial-in user to trigger
an IPsec VPN connection through Internet.
L2TP with IPsec Policy - Allow the remote dial-in user
to make a L2TP VPN connection through the Internet.
You can select to use L2TP alone or with IPsec. Select
from below:
None - Do not apply the IPsec policy. Accordingly,
the VPN connection employed the L2TP without
IPsec policy can be viewed as one pure L2TP
connection.
Nice to Have - Apply the IPsec policy first, if it is
applicable during negotiation. Otherwise, the
dial-in VPN connection becomes one pure L2TP
connection.
Must - Specify the IPsec policy to be definitely
applied on the L2TP connection.
SSL Tunnel- Allow the remote dial-in user to trigger an
SSL VPN connection through Internet.
Specify Remote VPN Gateway - You can specify the IP
address of the remote dial-in user or peer ID (should be the
same with the ID setting in dial-in type) by checking the box.
Also, you should further specify the corresponding security
methods on the right side.
If you uncheck the checkbox, the connection type you select
above will apply the authentication methods and security
methods in the general settings.
User Name - This field is applicable when you select PPTP or
L2TP with or without IPsec policy above. The length of the
name is limited to 11 characters.
Password - This field is applicable when you select PPTP or
L2TP with or without IPsec policy above. The length of the
password is limited to 11 characters.
VJ Compression - VJ Compression is used for TCP/IP
protocol header compression. This field is applicable when
you select PPTP or L2TP with or without IPsec policy above.
IKE Authentication Method - This group of fields is
applicable for IPsec Tunnels and L2TP with IPsec Policy when
you specify the IP address of the remote node. The only
exception is Digital Signature (X.509) can be set when you
select IPsec tunnel either with or without specify the IP
address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to
invoke this function and type in the required characters
(1-63) as the pre-shared key.
Digital Signature (X.509) –Check the box of Digital
Signature to invoke this function and select one
predefined Profiles set in the VPN and Remote Access
>>IPsec Peer Identity.
Local ID – Specify which one will be inspected
first.
Alternative Subject Name First – The alternative
subject name (configured in Certificate
Management>>Local Certificate) will be
inspected first.
Vigor2832 Series User's Guide

Advertisement

Table of Contents
loading

Table of Contents