Draytek VIGOR2925 SERIES User Manual page 405

Hide thumbs Also See for VIGOR2925 SERIES:

Table of Contents

Available settings are explained as follows:

IKE Authentication

IPSec Security Method

After finishing all the settings here, please click OK to save the configuration.

This usually applies to those are remote dial-in user or node

(LAN-to-LAN) which uses dynamic IP address and

IPSec-related VPN connections such as L2TP over IPSec

and IPSec tunnel. There are two methods offered by Vigor

router for you to authenticate the incoming data coming

from remote dial-in user, Certificate (X.509) and

Pre-Shared Key.

Certificate for Dial-in –Choose one of the local certificates

from the drop down list.

Pre-Shared Key- Specify a key for IKE authentication.

Confirm Pre-Shared Key- Retype the characters to

confirm the pre-shared key.

Note: Any packets from the remote dial-in user which does

not match the rule defined in VPN and Remote

Access>>Remote Dial-In User will be applied with the

method specified here.

Medium - Authentication Header (AH) means data will be

authenticated, but not be encrypted. By default, this option

High (ESP) - Encapsulating Security Payload (ESP) means

payload (data) will be encrypted and authenticated. You

may select encryption algorithm from Data Encryption

Standard (DES), Triple DES (3DES), and AES.

Vigor2925 Series User's Guide