D-Link DFL-900 User Manual page 62

D-Link
Remote Address Type
IP Address
Prefix Len/Subnet Mask
My IP Address
Security Gateway Addr
Outgoing SPI
Action
Incoming SPI
Encapsulation Mode
ESP – Encryption /
Authentication or
AH - Authentication
Step 4 ¡ Ð Detail settings of IPSec Manual
Key
For the detailed setting in the Manual Key. We
can press the Advanced button in the previous
page. Then set the parameter separately.
Local to Remote Protocol
/ Src Port / Dest Port
Condition
Remote to Local Protocol
/ Src Port / Dest Port
Determine the method to connect to the local side of VPN
by using the remote subnet or the remote single host.
The remote IP address
The remote IP Netmask
The IP address of local site DFL-900 Firewall/VPN
Router
The IP address of remote site device, like DFL-900
Firewall/VPN Router.
The Outgoing SPI (Security Parameter Index) value.
Notice¡ G HEX SPI must be a value between 600 and
600000.Or DEC SPI must be a value between 1500 and
6300000.
The Incoming SPI (Security Parameter Index) value.
Notice¡ G HEX SPI must be a value between 600 and
600000.Or DEC SPI must be a value between 1500 and
6300000.
Choose Tunnel or Transport mode, see Chapter 8 for
details.
Select the Encryption (DES or 3DES) and Authentication
(MD5 or SHA1) Algorithm combination. And enter the
key either hex or string format separately.
Table 9-4 Add a IPSec Manual Key rule
ADVANCED SETTINGS > VPN Settings > IPSec > Manual Key > Add
> Advanced
FIELD
Use this field to select some packets which are destined
for specified port (Dest Port) or coming from specified
port (Src Port) can use IPSec feature. The direction is
from local to remote.
Use this field to select some packets which are destined
for specified port (Dest Port) or coming from specified
port (Src Port) can use IPSec feature. The direction is
from remote to local.
DESCRIPTION
58
Part III
Subnet Address
192.168.88.0
255.255.255.0
61.2.1.1
210.2.1.1
2222
1111
Tunnel
ESP – Encryption
(DES) /
Authentication
(MD5)
EXAMPLE
TCP / 0 / 80
ANY / 0 / 0