D-Link DIR-816 User Manual page 175

DIR-816 Wireless AC750 Dual Band Router with 3G/LTE
Support and USB Port
User Manual
You can specify the following parameters:
Parameter
Dynamic IPsec
Remote host
Identifier
Local identifier value
Pre-shared key
Interface
NAT Traversal
Exchange mode
General Settings
Move the switch to the right to allow a remote host with any public IP
address to connect to the router via IPsec protocol. Such a setting can
be specified for one tunnel only. Connection requests via this tunnel
can be sent by a remote host only.
A remote subnet VPN gateway IP address. The field is available, if the
Dynamic IPsec switch is moved to the left.
Select an identification method of a remote host from the drop-down
list:
Address: A remote host is identified by its IP address.
FQDN: A remote host is identified by its domain name.
Specify the value of the identifier.
A key for mutual authentication of the parties.
Select a WAN connection through which the tunnel will pass. When
the Automatic value is selected, the router uses the default WAN
connection.
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled router.
Select the Disabled value to disable the function.
Select the Enabled value to enable the function if it is supported by a
remote host.
Select the Force value to make the function be always on, even if it is
not supported by a remote host.
Select the mode of negotiation from the drop-down list:
Main: The mode provides the most secure communication between
the parties in the course of negotiation of the authentication
procedures.
Base: The draft negotiation mode with preliminary authentication of
a host.
Aggressive: The mode provides faster operation as it skips several
stages of negotiation of the authentication procedures.
Page 175 of 215
Configuring via Web-based Interface
Description