D-Link DWR-956 User Manual page 126

DWR-956 Wireless AC1200 4G LTE Router
with Gigabit Ethernet Ports and 1 FXS Port
User Manual
Parameter
Local WAN
Local identifier
Local port
NAT Traversal
Mode
Allow traffic from
IPsec to router
A WAN connection through which the tunnel will pass. Select a value
from the drop-down list.
Interface: When this value is selected, the Interface drop-
•
down list is displayed. Select an existing WAN connection
from the list.
Default gateway: When this value is selected, the router uses
•
the default WAN connection.
A local identifier of the router to establish connection over IPsec with
particular hosts only. To establish connection, DWR-956 local
identifier value should correspond to the remote identifier value
specified in the settings of the remote host. Use an IP address, domain
name, or certificate CN. Optional.
A port of the router, that is used for IPsec packets exchange during the
First Phase of the connection. If the field is left blank, port 500 is used.
If the field is left blank and the network address translation (NAT)
function is used for the connection, port 4500 is used.
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled device. DWR-956 allows to forcibly encapsulate VPN
traffic in UDP packets for passing through a remote device regardless
of whether it supports address translation.
If you need to enable forced encapsulation of VPN traffic, select the
Enabled value.
If you need to disable forced encapsulation of VPN traffic, select the
Disabled value.
An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
TUNNEL: As a rule, it is used to create a secure connection to
•
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
based on the header of the new IP packet.
TRANSPORT: As a rule, it is used to encrypt data stream
•
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.
Move the switch to the left to deny access to your router from the
remote subnet via IPsec. The switch is displayed when the TUNNEL
value is selected from the Mode drop-down list.
Page 126 of 302
Configuring via Web-based Interface
Description