Remote Dial-In Status - Draytek Vigor2130 Series User Manual

Authentication
Identities
Advanced Settings
4 . 7 . 4 R e m o t e D i a
4 . 7 . 4 R e m o t e D i a
You can find the summary table of all dial-in user status.
Type - Determine the authentication method for remote dial-in
user.
Preshared secret – If you choose this one, you have to type the
shared secret manually and specify local identity. When using
Preshared secret, all clients share the same secret.
Local Identity - Specify a local ID to be used for Dial-in
setting in the LAN-to-LAN Profile setup. This item is optional
and can be used only in IKE aggressive mode. It can also be a
DNS name or an email address.
Phase 1 (IKE) - Negotiation of IKE parameters including
encryption, hash, Diffie-Hellman parameter values, and lifetime
to protect the following IKE exchange, authentication of both
peers using either a Pre-Shared Key or Digital Signature (x.509).
The peer that starts the negotiation proposes all its policies to
the remote peer and then remote peer tries to find a
highest-priority match with its policies.
Phase 2 (IPSec) - Negotiation IPSec security methods
including Authentication Header (AH) or Encapsulating
Security Payload (ESP) for the following IKE exchange and
mutual examination of the secure tunnel establishment.
l - i n S t a t u s
l - i n S t a t u s
164
Vigor2130 Series User's Guide