Ipsec Peer Identity - Draytek Vigor 3100 User Manual

IKE Authentication Method This usually applies to those are remote dial-in user or node
IPSec Security Method
3 . 7 . 4 I P S e c P
3 . 7 . 4 I P S e c P
To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote
User Dial-In connection, here you may edit a table of peer certificate for selection. As shown
below, the router provides 32 entries of digital certificates for peer dial-in users.
Click each index to edit one peer digital certificate. There are three security levels of digital
signature authentication: Fill each necessary field to authenticate the remote peer. The
following explanation will guide you to fill all the necessary fields.
84
e e r I d e n t i t y
e e r I d e n t i t y
(LAN-to-LAN) which uses dynamic IP address and
IPSec-related VPN connections such as L2TP over IPSec and
IPSec tunnel.
Pre-Shared Key -Currently only support Pre-Shared Key
authentication.
Pre-Shared Key- Specify a key for IKE authentication
Re-type Pre-Shared Key-Confirm the pre-shared key.
Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High - Encapsulating Security Payload (ESP) means payload
(data) will be encrypted and authenticated. You may select
encryption algorithm from Data Encryption Standard (DES),
Triple DES (3DES), and AES.
Vigor3100 Series User's Guide