TP-Link TD-W8970 User Manual page 44

After complete the basic settings and click Save/Apply in both Device1 and Device2, PCs in LAN1
could communicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2
which is 192.168.2.100 in PC1)

Note:
The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect
Forward Secrecy settings.
Click Show Advanced Settings and then you can configure the Advanced Settings.
 Mode: Select Main Mode to configure the standard negotiation parameters for IKE phase1.
 Aggressive Mode: Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to
carry out negotiation in a shorter amount of time. (Not Recommended-Less Secure)

Note:
The difference between the two is that aggressive mode will pass more information in fewer
packets, with the benefit of slightly faster connection establishment, at the cost of transmitting the
identities of the security firewall in the clear. When using aggressive mode, some configuration
parameters such as Diffie-Hellman groups, and PFS can not be negotiated, resulting in a greater
importance of having "compatible" configuration on both ends.
 Key Life Time:Enter the number of seconds for the IPSec lifetime. It is the period of time to
pass before establishing a new IPSec security association (SA) with the remote endpoint. The
default value is 3600.
Downloaded from www.Manualslib.com
TD-W8970 300Mbps Wireless N Gigabit ADSL2+ Modem Router User Guide
manuals search engine
Figure 4-26
35