Lan To Lan - Draytek Vigor2110 Series User Manual

User Name
Password
IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP
IPSec Security Method
4 . 1 0 . 6 L A N t o
4 . 1 0 . 6 L A N t o
Here you can manage LAN-to-LAN connections by maintaining a table of connection profiles.
You may set parameters including specified connection direction (dial-in or dial-out),
connection peer ID, connection type (VPN connection - including PPTP, IPSec Tunnel, and
L2TP by itself or over IPSec) and corresponding security methods, etc.
The router supports 2 VPN tunnels simultaneously and provides up to 32 profiles. The
following figure shows the summary table.
Vigor2110 Series User's Guide
Block – When there is conflict occurred between the hosts on
both sides of VPN Tunnel in connecting, such function can
block data transmission of Netbios Naming Packet inside the
tunnel.
This field is applicable when you select PPTP or L2TP with or
without IPSec policy above.
This field is applicable when you select PPTP or L2TP with or
without IPSec policy above.
with IPSec Policy when you specify the IP address of the
remote node. The only exception is Digital Signature (X.509)
can be set when you select IPSec tunnel either with or without
specify the IP address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to invoke
this function and type in the required characters (1-63) as the
pre-shared key.
Digital Signature (X.509) – Check the box of Digital Signature
to invoke this function and Select one predefined Profiles set in
the VPN and Remote Access >>IPSec Peer Identity.
This group of fields is a must for IPSec Tunnels and L2TP with
IPSec Policy when you specify the remote node. Check the
Medium, DES, 3DES or AES box as the security method.
Medium -Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
invoked. You can uncheck it to disable it.
High-Encapsulating Security Payload (ESP) means payload
(data) will be encrypted and authenticated. You may select
encryption algorithm from Data Encryption Standard (DES),
Triple DES (3DES), and AES.
Local ID - Specify a local ID to be used for Dial-in setting in
the LAN-to-LAN Profile setup. This item is optional and can be
used only in IKE aggressive mode.
L A N
L A N
165