D-Link DIR-842 User Manual page 167

DIR-842 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh Gigabit
Router
User Manual
Parameter
Name
IP version
Dynamic IPsec
Type
Remote host
Remote identifier
Remote port
Pre-shared key
7 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.
A name for the tunnel for easier identification. Use digits, Latin letters
(uppercase and/or lowercase), and other characters available in the US
7
keyboard layout.
An IP version.
Move the switch to the right to allow a remote host with any public IP
address to connect to the router via IPsec protocol. Such a setting can
be specified for one IPsec tunnel only. Connection requests via this
tunnel can be sent by a remote host only.
Select an identification method for the remote host (router) from the
drop-down list:
Address: The remote host is identified by its IP address.
•
FQDN: The remote host is identified by its domain name.
•
The drop-down list is displayed if the Dynamic IPsec switch is
moved to the left.
Enter the remote subnet VPN gateway IP address if the Address
value is selected from the Type drop-down list.
Enter the remote subnet VPN gateway domain name if the FQDN
value is selected from the Type drop-down list.
The field is available for editing if the Dynamic IPsec switch is
moved to the left.
A remote host identifier to establish connection over IPsec with
particular hosts only. To establish connection, DIR-842 remote
identifier value should correspond to the local identifier value
specified in the settings of the remote host. Use an IP address, domain
name, or certificate CN. Optional.
A port of the remote host, that is used for IPsec packets exchange
during the First Phase of the connection. If the field is left blank, port
500 is used. If the field is left blank and the network address
translation (NAT) function is used for the connection, port 4500 is
used.
A PSK key for mutual authentication of the parties.
icon ( ) to display the entered key.
Page 167 of 233
Configuring via Web-based Interface
Description
Click the Show