Draytek VigorFly 210 User Manual page 115

TCP/IP Network
Settings
VigorFly 210 Series User's Guide
applicable during negotiation. Otherwise, the dial-in VPN
connection becomes one pure L2TP connection.

Must - Specify the IPSec policy to be definitely applied
on the L2TP connection.
Specify Remote VPN Gateway - You can specify the IP
address of the remote dial-in user or peer ID (should be the
same with the ID setting in dial-in type) by checking the box.
Also, you should further specify the corresponding security
methods on the right side. If you uncheck the checkbox, the
connection type you select above will apply the authentication
methods and security methods in the general settings.
User Name - This field is applicable when you select PPTP or
L2TP with or without IPSec policy above. The maximum
length for both username is 11 characters.
Password - This field is applicable when you select PPTP or
L2TP with or without IPSec policy above. The maximum
length for both username is 11 characters.
VJ Compression - VJ Compression is used for TCP/IP
protocol header compression. This field is applicable when you
select PPTP or L2TP with or without IPSec policy above.
IKE Authentication Method - This group of fields is
applicable for IPSec Tunnels and L2TP with IPSec Policy
when you specify the IP address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to invoke
this function and type in the required characters (1-63) as the
pre-shared key.
IPSec Security Method - This group of fields is a must for
IPSec Tunnels and L2TP with IPSec Policy when you specify
the remote node.
Phase 1/2 Algorithm- Encapsulating Security Payload (ESP)
means payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Triple DES (3DES) and
AES.
Remote Network IP/ Remote Network Mask - Add a static
route to direct all traffic destined to this Remote Network IP
Address/Remote Network Mask through the VPN connection.
For IPSec, this is the destination clients IDs of phase 2 quick
mode.
Local Network IP / Local Network Mask - Add a static route
to direct all traffic destined to Local Network IP Address/Local
Network Mask through the VPN connection.
Route/NAT Mode -
to dial in with single IP, please choose NAT, otherwise choose
Route.
Change default route to this VPN tunnel - Check this box to
change the default route with this VPN tunnel. Note that this
setting is available only for one WAN interface is enabled. It is
not available when both WAN interfaces are enabled.
107
If the remote network only allows you