Draytek Vigor2925 Series User Manual page 385

IPSec VPN with the
Same subnet
RIP Direction - The option specifies the direction of RIP
(Routing Information Protocol) packets. You can
enable/disable one of direction here. Herein, we provide
four options: TX/RX Both, TX Only, RX Only, and
Disable.
From first subnet to remote network, you have to
do -
If the remote network only allows you to dial in with
single IP, please choose NAT, otherwise choose Route.
Change default route to this VPN tunnel - Check this box
to change the default route with this VPN tunnel.
For both ends (e.g., different sections in a company) are
within the same subnet, there is a function which allows
you to build Virtual IP mapping between two ends. Thus,
when VPN connection established, the router will change
the IP address according to the settings configured here and
block sessions which are not coming from the IP address
defined in the Virtual IP Mapping list.
After checking the box of IPSec VPN with the Same
subnet, the options under TCP/IP Network Settings will
be changed as shown below:
Remote Network IP/ Remote Network Mask - Add a
static route to direct all traffic destined to this Remote
Network IP Address/Remote Network Mask through the
VPN connection. For IPSec, this is the destination clients
IDs of phase 2 quick mode.
Translated Local Network – This function is enabled in
default. Use the drop down list to specify a LAN port as the
transferred direction. Then specify an IP address. Click
Advanced to configure detailed settings if required.
Advanced – Add a static route to direct all traffic destined
to more Remote Network IP Addresses/ Remote Network
Mask through the VPN connection. This is usually used
when you find there are several subnets behind the remote
369
Vigor2925 Series User's Guide