Draytek Vigor2760 Series User Manual page 186

If you choose Pre-shared Key, you have to configure,
Pre-shared Key - Type 1-63 characters as pre-shared key.
Confirm Pre-shared Key - Type the pre-shared key again for
confirmation.
If you choose Digital Certificate, you have to configure the
following settings for both local end and remote end.
Local Certificate – Choose a certificate profile used for Vigor
router. The certificate profile is defined in Certificate
Management>>Local Certificate.
Peer Certificate – Choose a certificate profile used for remote
end. Such certificate profile is defined in Certificate
Management>>Remote Certificate.
Advanced This field is applicable when you select L2TP as server type
and the function of L2TP over IPsec enabled. Click the small
triangle to unfold the available setting items.
Peer ID Type – This option is available when Digital
Certificate is selected as Authentication Method above.
Choose the ID type for the remote end. If you choose Accept
any peer ID, it is not necessary for you to specify any ID
further. All the peer IDs are acceptable
Peer ID (DN) –If you choose Accept custom peer DN, you
have to type the name you got from the peer end in the field of
Peer ID (DN). Only the specified one is acceptable. The data
shall be typed as, e.g.,
"C=TW, ST=Hsinchu, L=Hokou, O=Draytek, OU=RD,
CN=John/emailAddress=john@test.com" or
"C=TW", O=Draytek".
Local ID (optional) and Peer ID (optional) - This option is
available when Pre-shared Key is selected as Authentication
Method above. You can define a name to be used by local user
and the peer user. If no name specified here, the system will
use My WAN IP as the local ID and the Remote Host as the
Peer ID configured in this web page.
Phase1 Mode –Select from Main mode and Aggressive mode.
The ultimate outcome is to exchange security proposals to
create a protected secure channel. Main mode is more secure
than Aggressive mode since more exchanges are done in a
secure channel to set up the IPSec session. However, the
Aggressive mode is faster. The default value in Vigor router is
Main mode.
IKE Proposals –To propose the local available authentication
schemes and encryption algorithms to the VPN peers, and get
178 Vigor2760 Series User's Guide