Table of Contents
Advertisement
Available settings are explained as follows:
Item
General
Authentication
Network
Vigor1000 Series User's Guide
Description
Enabled - Check here to activate this tunnel.
Always On - Check this box to make the WAN connection
being activated always.
Name - Specify a name for this tunnel.
Remote IP/Host Name - Enter the IP address/FQDN of
the remote host that located at the other-end of the VPN
tunnel.
IKE phase 1 mode - Select from Main mode and
Aggressive mode. The ultimate outcome is to exchange
security proposals to create a protected secure channel.
Main mode is more secure than Aggressive mode since
more exchanges are done in a secure channel to set up the
IPSec session. However, the Aggressive mode is faster.
The default value in Vigor router is Main mode.
Type - There are two types for you to choose for
authentication.
Pre-Shared Key - Such field will be applicable when
Pre-shared key is selected as the Type for the
authentication. Input 1-63 characters as pre-shared key.
Confirm Pre-Shared key - Such field will be applicable
when Pre-shared key is selected as the Type for the
authentication. Input 1-63 characters as pre-shared key
again to confirm it.
Local Identity - Local Identity is on behalf of the IP
address while identity authenticating with remote VPN
server. The length of the ID is limited to 47 characters.
Remote Identity - This field defines the identity of the
remote end.
Local Certificate - If you choose Certificate as the Type,
you have to specify one of the local certificates.
Local Network / Mask - Traffic between this subnet and
the subnet specified in Remote Network / Mask will travel
through the VPN tunnel.
Remote Network / Mask - Add a static route to direct all
traffic destined to this Remote Network IP
Address/Remote Network Mask through the VPN
connection. For IPSec, this is the destination clients IDs of
phase 2 quick mode.
Change default route to this VPN tunnel – Check the
157
Advertisement
Table of Contents
