Draytek VIGOR 3300 User Manual page 100

Security Protocol
NAT Traversal
WAN Interface
Local Certificate
Security Gateway
Network IP /
Subnet Mask
Next Hop
Remote ID
DHCP-over-IPSEC
Security Gateway
Network IP /
Subnet Mask
For Advanced Configuration
96
AH - Specify the IPSec protocol for the Authentication Header
protocol. The data will be authenticated but not be encrypted.
ESP - Specify the IPSec protocol for the Encapsulating Security
Payload protocol. The data will be encrypted and authenticated.
Click Enable to let multi IPSec tunnels passing through this
router.
Click Disable to close this function.
The WAN interface to be used.
The local certificate is active for authentication if the RSA
Signature option is selected in the Authentication field. These
options come from the user certificate file.
The IP address of the local gateway's public-network interface.
The keyword "default" can be used to represent the IP Address
of the selected "WAN Interface".
The subnet behind the local gateway.
The IP address of the next hop. The keyword default can be
used to represent the gateway IP address of the selected WAN
Interface.
The identification number for the remote gateway.
Turns this function ON or OFF.
The IP address of the remote client/gateway. This field is
mandatory. The setting for 0.0.0.0 is used for the road-warrior
with a dynamic IP address.
The subnet behind the remote gateway. If the remote gateway
IP address is 0.0.0.0, this field can be omitted, but you can
specify it as 0.0.0.0/32 for clarity.
Vigor3300 Series User's Guide