TP-Link TD-W8968 User Manual page 68

TD-W8968
Click Add New Connection in Figure 4-66 and then you will enter the screen shown in Figure
4-67.
IPSec Connection Name: Enter a name for your VPN.
Remote IPSec Gateway Address (IP or Domain Name): Enter the destination gateway IP
address in the box which is the public WAN IP or Domain Name of the remote VPN server
endpoint. (For example: Input 219.134.112.247 in Device1, Input 219.134.112.246 in Device
2)
Tunnel access from local IP addresses: Choose Subnet if you want the Whole LAN to join
the VPN network, or else choose Single Address if you want single IP to join the VPN network.
IP Address for VPN: Enter the IP address of your LAN. (For example: Input 192.168.1.1 in
Device1, Input 192.168.2.1 in Device2)
IP Subnetmask: Enter the Subnet mask of your LAN. ( For example: Input 255.255.255.0 in
both Device1 and Device2)
Tunnel access from remote IP addresses: Choose Subnet if you want the Remote Whole
LAN to join the VPN network, or else choose Single Address if you want single IP to join the
VPN network.
IP Address for VPN: Enter the IP address of the Remote LAN. ( For example: Input
192.168.2.1 in Device1,Input 192.168.1.1 in Device2)
IP Subnetmask: Enter the subnetmask of the remote LAN. ( For example: Input
255.255.255.0 in both Device1 and Device2)
Key Exchange Method: Select Auto (IKE) or Manual.
Authentication Method: Select Pre-Shared Key (recommended).
Pre-Shared Key: Input the Pre-Shared key for Authentication. (For example: Input 12345678)
Perfect Forward Secrecy: PFS is an additional security protocol.
We recommend you leave the Advanced Settings as default value.
300Mbps Wireless N USB ADSL2+ Modem Router User Guide
Figure 4-67
59