Draytek Vigor2120n-plus User Manual page 63


When you choose SSL, you will see the following graphic:
Available settings are explained as follows:
Item
Profile Name
Always On
Server IP/Host Name
for VPN
IKE Authentication
Method
IPsec Security
Method
Description
Type a name for such profile. The length of the file is
limited to 10 characters.
Check to enable router always keep VPN connection.
Type the IP address of the server or type the host name for
such VPN profile.
IKE Authentication Method usually applies to those are
remote dial-in user or node (LAN to LAN) which uses
dynamic IP address and IPsec-related VPN connections
such as L2TP over IPsec and IPsec tunnel.
Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key-Confirm the pre-shared key.
Digital Signature (X.509) - Click Digital Signature to
invoke this function.

Peer ID – Choose the peer ID selection from the drop
down list.

Local ID – Choose Alternative Subject Name First or
Subject Name First.

Local Certificate – Use the drop down list to choose
one of the certificates for using. You have to configure
one certificate at least previously in Certificate
Management >> Local Certificate. Otherwise, the
setting you choose here will not be effective.
Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is active.
High - Encapsulating Security Payload (ESP) means
47
Vigor2120 Series User's Guide