Draytek Vigor2136 Series User Manual page 189

Security
Local IP Assignment
Cancel
Apply
After finishing this web page configuration, please click Apply to save the settings.
Enable OpenVPN - Switch the toggle to enable OpenVPN protocol.
Specify VPN Peer – Switch the toggle to enable/disable the security
mechanism for the remote client.
Remote Client IP – Enter the IP address of the remote peer.
Pre-Shared Key – "Specify VPN Peer" can restrict this IPsec to be
initiated only by the specified peer IP address or domain name, and
specify the private key to be used.
X.509 Digital Signature - Accept the certificates authentication. To
use an X.509 digital signature, select one of the authentication
methods and enter the required information for each method.
Disabled – Select to disable the certificate application for VPN

connection.
Accept Subject Alternative Name –The following three formats of

Peer ID are acceptable, including IP Address, Domain Name, and
Email.
Select from Existing Certificates –Select a peer certificate that has

been pre-obtained and stored in Configuration>>Certificates
Local Certificates.
Accept Subject Name – Enter the complete certificate subject

name.
Accept Any – Any certificate signed by a trusted CA in

Configuration>>Certificates Trusted CA will be considered valid.
Click IPsec Advanced Settings to get the following options. Local ID
and Peer ID are provided for certain connections that require
specifying an ID, such as IKEv1 using Aggressive mode and IKEv2
(optional).
Peer ID – Specify a local ID to be used when establishing a VPN

connection using IPsec VPN type. Enter the ID name for the
remote client.
Local ID (optional) - If the values are specified, only connections

coming from the specified IP address and/or having the specified
Peer ID will be accepted.
Assign IP By – Select LAN DHCP or Static IP.
If Static IP is selected,
Static IP – Specify an IPv4 address.

Assign IP from – Select a LAN interface for IP assignment.
Assign DNS By – Choose LAN DHCP (the DNS IP will be assigned by
Vigor router automatically) or Static DNS. If Static DNS is selected,
configure Primary DNS and Secondary DNS.
Primary DNS – Enter the IPv4 address for Primary DNS server.

Secondary DNS – Enter another IPv4 address for DNS server if

required.
Discard current settings and return to the previous page.
Save the current settings and exit the page.
179