Draytek Vigor2136 Series User Manual page 226

Username and
Password
OpenVPN Settings
Dial Out Advanced
Settings
Interface
Peer
It is available when Dial-Out/Dial-In is selected as the Direction and
OpenVPN is selected as VPN Type.
Username - Used by the remote LAN to establish a VPN connection.
Password - Used by the remote LAN to establish a VPN connection.
It is available when Dial-Out is selected as the Direction and
OpenVPN is selected as VPN Type.
Dial-Out Protocol – Select TCP or UDP as VPN server protocol.
Import OpenVPN Config - An OpenVPN config file from other Vigor
router can be imported and apply to this router.
Select to import an OpenVPN configuration file from a specified
OpenVPN server (e.g., Vigor router, PC, other VPN provider, etc.) onto
to Vigor router. Later, as a VPN client, this router can access into VPN
server via the username and password. If the configuration file
contains certificates, they will be automatically imported.
Cipher Algorithm – Select the desired cipher algorithm. Two
encryption algorithms are supported: AES128 and AES256. AES256 is
more secure than AES128 but may result in lower performance
because it incurs higher computational overhead.
HMAC Algorithm – HMAC stands for Hash-based Message
Authentication Code. It is used to validate the data integrity and
authenticity of the VPN data.
Select the desired HMAC hash algorithm. Two hash algorithms, SHA1
SHA256 and SHA512, are supported. SHA512 is preferred as it is more
robust and reliable than SHA1.
Client Certificate – Use the dropdown list to select a client certificate
that has already been uploaded to the router. Default (Use CERT from
OPenVPN Config) will be selected automatically after import OpenVPN
Config file.
Trusted CA – Use the dropdown list to select a trust CA certificate that
has already been uploaded to the router. Default (Use CA from
OPenVPN Config) will be selected automatically after import OpenVPN
Config file.
Compress – Select a method to compress the packets to reduce the
bandwidth usage while transferring the compressed packets.
TLS Auth – Switch the toggle to use/close the TLS authentication
method. If the OpenVPN configuration file contains TLS Key, they will
be automatically imported.
WireGuard
It is available when Dial-Out is selected as the Direction and
Wireguard is selected as VPN Type.
Private Key – Displays the private key generated by clicking
Generate.
Generate Private Key – Click the Generate button to generate a key
pair (including private key and public key).
Public Key - Displays the public key generated by clicking Generate.
It is available when Dial-Out/Dial-In is selected as the Direction and
Wireguard is selected as VPN Type.
Configure the settings for the client (peer).
Public Key - Enter the Public key of the Peer VPN server.
Pre-Shared Key - Displays the private key generated by clicking
216