Table 46 Vpn: L2Tp: Create: Remote Access Connection - ZyXEL Communications ZyXEL Prestige 794M User Manual

Prestige 794M User's Guide
The following table describes the labels in this screen.

Table 46 VPN: L2TP: Create: Remote Access Connection

LABEL
Connection Name
Type
Server IP Address (or
Domain Name)
Private IP Address
Assigned to Dial in
User
Username
Password
Authentication Type
Idle Time
Active as default route Select this option to set this VPN connection as a default route.
IPSec
Authentication
Encryption
89
DESCRIPTION
Enter a descriptive name for identification purposes.
Select Dial Out to set the Prestige to act as a client (connecting to a remote
VPN server).
Select Dial In to set the Prestige to act as a VPN server.
This field is applicable when you select Dial Out in the Type field
Enter the IP address or the domain name of the remote VPN device.
This field is applicable when you select Dial In in the Type field.
Enter the IP address (in dotted decimal notation) to assign to the remote VPN
client that initiates the VPN connection. For example, 192.168.1.10.
If you select Dial Out in the Type field, enter the username provided.
If you select Dial In in the Type field, enter a username to be used when
establishing a VPN connection.
Enter the password associated with the username above.
Specify the authentication type to use when accepting or establishing a VPN
connection. Choices are PAP (Password Authentication Protocol) and CHAP
(Challenge Handshake Authentication Protocol). The default is CHAP.
When you select PAP, password is sent unencrypted. While CHAP provides
better security by encrypting the password before transmission and
reauthenticates the VPN client to protect against identity theft.
Specify the time interval in minutes (where there is no traffic between the
Prestige and the computer) that can elapse before the Prestige automatically
disconnects the connection.
Enter 0 to allow connection up all the time.
Select this option to enable IPSec security for your LT2P VPN connection.
Specify the method to authenticate data packet in this field. Choices are
None, MD5 and SHA1.
Select None to disable authentication.
Select MD5 (Message Digest 5) for minimal security and SHA1 (Secure Hash
Algorithm) for maximum security.
Specify the method to encrypt data packet in this field. Choices are NULL,
DES, 3DES, AES128, AES 192 and AES 256.
When DES is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. The DES
encryption algorithm uses a 56-bit key.
Triple DES (3DES) is a variation on DES that uses a 168-bit key. As a result,
3DES is more secure than DES. It also requires more processing power,
resulting in increased latency and decreased throughput.
For this implementation, select AES 128, AES 192 or AES 256 that uses
different encryption key lengths. AES is faster than 3DES.
elect NULL to set up a tunnel without encryption. When you select NULL, you
do not enter an encryption key.
Chapter 7 VPN