Draytek Vigor2955 User Manual page 132

Dual wan ssl vpn appliance
Hide thumbs Also See for Vigor2955:
Table of Contents

Advertisement

PPTP
IPSec Tunnel
L2TP with ...
User Name
Password
PPP Authentication
VJ compression
IKE Authentication
Method
IPSec Security Method
Vigor2955 User's Guide
further set up Callback (CBCP) function below. This feature is
useful for i model only.
Build a PPTP VPN connection to the server through the
Internet. You should set the identity like User Name and
Password below for the authentication of remote server.
Build an IPSec VPN connection to the server through Internet.
Build a L2TP VPN connection through the Internet. You can
select to use L2TP alone or with IPSec. Select from below:
None: Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
Nice to Have: Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-out VPN connection
becomes one pure L2TP connection.
Must: Specify the IPSec policy to be definitely applied on the
L2TP connection.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above. PAP/CHAP is the most
common selection due to wild compatibility.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above. VJ Compression is used
for TCP/IP protocol header compression. Normally set to Yes
to improve bandwidth utilization.
This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy.
Pre-Shared Key-Input 1-63 characters as pre-shared key.
Digital Signature (X.509) – This setting will be available
when IPSec Tunnel is selected. Click this radio button to
invoke this function and select one predefined profile in the
Peer ID (set from VPN and Remote Access>>IPSec Peer
Identity).
Peer ID – Display the IPSec Peer Identity profiles. Use the
drop down menu to choose any one desired.
Local ID – There are two selections offered here. Choose
Alternative Subject Name First or choose Subject Name
First based on the local certificate selected below.
Local Certificate - When the router (served as the client)
executes LAN to LAN dial out with IPSec mode, it will
transfer the certificate to the server based on the setting
selected here. Please use the drop down list to choose one of
the certificates configured in Certificate
Management>>Local Certificate.
This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy.
122

Advertisement

Table of Contents
loading

This manual is also suitable for:

Vigor2950 series

Table of Contents