Asus Internet Security Router User Manual page 104

Chapter 10. Configuring VPN
Options
VPN Connection Type
Site to site
Remote access
User Group (only available for Remote Access mode)
Select a user group from the User Group drop-down list to which this rule should apply.
Local Secure Group
This option allows you to set the local secure network to which this rule should apply. This option
allows you to apply this rule inclusively on all computers in the internal network. Use the "Type"
drop-down list to select one of the following:
IP Address
Subnet
Subnet Address
Subnet Mask
IP Range
Start IP
End IP
Remote Secure Group (only available for site to site VPN mode)
This option allows you to set the remote (destination) secure network to which this rule should
apply. This option allows you to apply this rule inclusively on all computers in the external network.
Use the "Type" drop-down list to select one of the following:
IP Address
Subnet
IP Range
Remote Gateway
You have a choice of entering either the IP address or the FQDN (fully qualified domain name) for
the remote secure gateway.
Any
IP Address
FQDN
Key Management (only available for site to site VPN mode)
Two modes are supported: pre-shared key and manual key. Select from the Key Management
drop-down list for the desired key management mode. If "manual key" mode is selected,
configuration for IKE proposal is skipped.
IKE Proposal Settings (only available for pre-shared key)
Note that all options for the IKE proposal settings are available only when pre-shared key is selected.
IKE Mode
88
Description
Click this radio button to add a policy for site-to-site users.
Click this radio button to add a policy for remote access users.
Enter the appropriate IP address for the local secure group.
This option allows you to include all the computers that are connected in an
IP subnet. The following fields become available when this option is
selected:
Specify the appropriate network address.
Enter the subnet mask.
This option allows you to include a range of IP addresses for applying this
rule. The following fields become available for entry when this option is
selected:
Enter the starting IP address of the range.
Enter the ending IP address of the range.
Select any of these and enter details as described in the Local Secure
Group above.
Select this option to accept connection request from any computer.
Select this option to specify an IP address for the remote secure gateway.
Select this option to enter the fully qualified domain name for the remote
secure gateway.
Main mode and aggressive mode are supported. Click the proper radio
button for the desired IKE mode.
Internet Security Router User's Manual