Draytek Vigor2850 Series User Manual page 229

Vdsl2 security firewall
Hide thumbs Also See for Vigor2850 Series:
Table of Contents

Advertisement

Gre over IPSec Settings
TCP/IP Network Settings
High- Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated.
You may select encryption algorithm from Data
Encryption Standard (DES), Triple DES (3DES), and
AES.
The callback function provides a callback service only for
the ISDN LAN-to-LAN connection (this feature is useful
for "i" model only). The remote user will be charged the
connection fee by the telecom.
Enable Callback Function-Enables the callback function.
Use the Following Number to Callback- Check it to use
the following parameters for Callback Function.
Callback Number - The option is for extra security. Once
enabled, the router will ONLY call back to the specified
Callback Number.
Callback Budget - Specify the time budget for the dial-in
user. The budget will be decreased automatically per
callback connection. The default value 0 means no
limitation of callback period.
Enable IPSec Dial-Out function GRE over IPSec: Check
this box to verify data and transmit data in encryption with
GRE over IPSec packet after configuring IPSec Dial-Out
setting. Both ends must match for each other by setting
same virtual IP address for communication.
Logical Traffic: Such technique comes from RFC2890.
Define logical traffic for data transmission between both
sides of VPN tunnel by using the characteristic of GRE.
Even hacker can decipher IPSec encryption, he/she still
cannot ask LAN site to do data transmission with any
information. Such function can ensure the data transmitted
on VPN tunnel is really sent out from both sides. This is an
optional function. However, if one side wants to use it, the
peer must enable it, too.
My GRE IP: Type the virtual IP for router itself for
verified by peer.
Peer GRE IP: Type the virtual IP of peer host for verified
by router.
My WAN IP –This field is only applicable when you select
PPTP or L2TP with or without IPSec policy above. The
default value is 0.0.0.0, which means the Vigor router will
get a PPP IP address from the remote router during the
IPCP negotiation phase. If the PPP IP address is fixed by
remote side, specify the fixed IP address here. Do not
change the default value if you do not select PPTP or L2TP.
Remote Gateway IP - This field is only applicable when
you select PPTP or L2TP with or without IPSec policy
above. The default value is 0.0.0.0, which means the Vigor
router will get a remote Gateway PPP IP address from the
remote router during the IPCP negotiation phase. If the PPP
IP address is fixed by remote side, specify the fixed IP
219
Vigor2850 Series User's Guide

Advertisement

Table of Contents
loading

This manual is also suitable for:

Vigor2850nVigor2850vnVigor2850i

Table of Contents