Draytek Vigor C410 Series User Manual page 265

More Subnets
Options under the Advanced Mode
Dial-Out Interface
Mode
Dial-Out Interface
OpenVPN Settings
Dial Out Advanced
Settings
shown in this field.
It is used to add more static routes for subnets destined for the
remote network.
Switch the toggle to enable/disable this function.
+Add – If the function is enabled, click Add to add new static

route. Enter required information for remote network and subnet
mask.
Select the WAN connection for connections made using this profile.
This setting is useful for dial-out only.
Selected Interface First – While connecting, the router will use the
selected WAN interface first for VPN connection. If selected WAN fails,
the router will try to use other WAN(s).
Selected Interface Only – While connecting, the router will use
selected WAN as the only interface for VPN connection.
Manual – Customize VPN settings. Specify which WANs can be used
as outgoing interfaces.
Auto Select – Decide which interface to dial out based on the default
route.
Default WAN IP / IP Address – Use the drop-down list to specify one
WAN IP address for this VPN profile.
It is available when Dial-Out is selected as the Direction and
OpenVPN is selected as VPN Type.
Dial-Out Protocol – Select TCP or UDP as VPN server protocol.
Import OpenVPN Config - An OpenVPN config file from other Vigor
router can be imported and apply to this router.
Select to import an OpenVPN configuration file from a specified
OpenVPN server (e.g., Vigor router, PC, other VPN provider, etc.) onto
to Vigor router. Later, as a VPN client, this router can access into VPN
server via the username and password. If the configuration file
contains certificates, they will be automatically imported.
Cipher Algorithm – Select the desired cipher algorithm. Two
encryption algorithms are supported: AES128, AES192 and AES256.
AES256 is more secure than AES128 but may result in lower
performance because it incurs higher computational overhead.
HMAC Algorithm – HMAC stands for Hash-based Message
Authentication Code. It is used to validate the data integrity and
authenticity of the VPN data.
Select the desired HMAC hash algorithm. Two hash algorithms, SHA1
and SHA256, are supported. SHA256 is preferred as it is more robust
and reliable than SHA1.
Client Certificate – Use the dropdown list to select a client certificate
that has already been uploaded to the router. Default (Use CERT from
OPenVPN Config) will be selected automatically after import OpenVPN
Config file.
Trusted CA – Use the dropdown list to select a trust CA certificate that
has already been uploaded to the router. Default (Use CA from
OpenVPN Config) will be selected automatically after import OpenVPN
Config file.
Compress – Select a method to compress the packets to reduce the
255