Draytek Vigor 3200 Series User Manual page 260

Item
Type of Server I am
calling
User Name
Password
PPP Authentication
VJ compression
IKE Authentication
Method
Vigor3200 Series User's Guide
Description
any one of VPN peers wants to disconnect the connection, it
should follow a serial of packet exchange procedure to inform
each other. However, if the remote peer disconnect without
notice, Vigor router will by no where to know this situation. To
resolve this dilemma, by continuously sending PING packets
to the remote host, the Vigor router can know the true
existence of this VPN connection and react accordingly. This
is independent of DPD (dead peer detection).
PPTP - Build a PPTP VPN connection to the server through
the Internet. You should set the identity like User Name and
Password below for the authentication of remote server.
IPSec Tunnel - Build an IPSec VPN connection to the server
through Internet.
L2TP with IPSec Policy - Build a L2TP VPN connection
through the Internet. You can select to use L2TP alone or with
IPSec. Select from below:
None: Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
Nice to Have: Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-out VPN connection
becomes one pure L2TP connection.
Must: Specify the IPSec policy to be definitely applied on the
L2TP connection.
This field is applicable when you select, PPTP or L2TP with or
without IPSec policy above.
This field is applicable when you select PPTP or L2TP with or
without IPSec policy above.
This field is applicable when you select, PPTP or L2TP with or
without IPSec policy above. PAP/CHAP is the most common
selection due to wild compatibility.
This field is applicable when you select PPTP or L2TP with or
without IPSec policy above. VJ Compression is used for
TCP/IP protocol header compression. Normally set to Yes to
improve bandwidth utilization.
This group of fields is applicable for IPSec Tunnels and L2TP
with IPSec Policy.
Pre-Shared Key - Input 1-63 characters as pre-shared key.
Digital Signature (X.509) – Check the box of Digital
Signature to invoke this function. Then, specify the following
items for authentication with digital signature.
Peer ID - Select one of the predefined Profiles set in
VPN and Remote Access >>IPSec Peer Identity.
Local ID – Specify a local ID (Alternative Subject
Name First or Subject Name First) to be used for
Dial-in setting in the LAN-to-LAN Profile setup. This
item is optional and can be used only in IKE aggressive
250