D-Link DWR-555 User Manual page 40

Section 3 - Configuration
PFS Group:
Preshared Key:
Remote ID:
Local ID:
Extended Authentication:
xAuth - None:
xAuth - Server Mode:
Set IKE Proposal:
Set IPSec Proposal:
D-Link DWR-555 User Manual
Three groups can be selected: None, Group 1, Group 2, Group 5.
None: No pfs group is used.
Group 1: Uses a 768-bit Diffie-Hellman prime modulus group.
Group 2: Uses a 1024-bit Diffie-Hellman prime modulus group.
Group 5: Uses a 1536-bit Diffie-Hellman prime modulus group.
The first key that supports IKE mechanism of both VPN gateway and VPN client host for negotiating further
security keys. The pre-shared key must be same on both VPN gateways and clients.
The Type and the Value must be the same as the Type and the Value of the Local ID of the remote VPN
gateway.
The Type and the Value must be the same as the Type and the Value of the Remote ID of the remote VPN
gateway.
With the xAuth feature, the VPN client (or initiator) needs to provide additional user information to remote VPN
server (or VPN gateway) for extended authentication. The VPN server would reject the connect request from
VPN clients because of the unknown user, even though the pre-shared key is correct. This function is suitable
to remote mobile VPN clients. You can configure a VPN rule with a pre-shared key for all remote users using,
but you can also designate only someone is permitted to establish VPN connection with VPN server.
Disables Extended Authentication (xAuth).
Select this checkbox if the device behaves as a VPN server, and will verify the legality of user information
from VPN client. The user information that is provided by VPN client needs to match to user information that
is in local user database of VPN server. You can press "XAUTH account" button to edit local user database.
Please note that only VPN clients with xAuth can establish VPN connection with the device if this checkbox
has been selected.
Select this checkbox to enable IKE proposals.
Select this checkbox to enable IPSec proposals
36