Digi Connect WAN Series User Manual page 62

Digi Connect WAN Family web interface
VPN tunnel configuration settings
Description: Type a short, one-line description of the VPN tunnel.
n
VPN Tunnel: Displays settings for encryption and authentication keys. Selecting ISAKMP is
n
recommended; almost all VPN devices use this standard protocol. ISAKMP is more secure than
manually setting the keys The only time to set the keys manually is when connecting with an
old VPN device that does not support ISAKMP, in which case you should replace the obsolete
box with one that does.
Local Endpoint Type:
n
Select Local endpoint is a subnet to allow devices on the remote network to see devices on
the local network. This is the standard way IPsec works and the correct choice in most cases.
Select Local endpoint is an internal interface to not allow devices on the remote network
to see devices on the local network. This causes the Digi device to create a virtual endpoint and
assign it the IP address specified later in the settings on this page. Devices on the remote
network will only see the IP address of this endpoint, and cannot see the IP addresses of any
devices on the local private network. This feature must be used in combination with NAT. If you
select it, then you must update the NAT settings on the Network >IP Forwarding page. You
must enable NAT translation for the VPN interface that corresponds to the tunnel. Tunnel 1
uses interface vpn0, tunnel 2 uses vpn1, and so on.
VPN Mode:
n
If a single remote VPN device will be used for this VPN tunnel, select
Initiate client connections to and accept connections from the remote VPN device at and
type the remote device's IP address or DNS name in the field below. If the Digi device should
accept connections from any remote VPN device for this tunnel, select the Accept connections
from any VPN device option.
Digi Connect WAN Family User Guide
Configuration through the web interface
62