Draytek Vigor2860 Series User Manual page 260

Always On
Pre-Shared Key
Digital Signature
(X.509)
IPsec Security
Method
User Name
Password
Remote Network IP
Remote Network
Mask
Vigor2860 Series User's Guide
the only channel for VPN connection.
WAN1 Only: Backup WAN2 - While connecting, the
router will use WAN2 for VPN connection. If WAN2 fails,
the router will use backup WAN1 interface instead.
WAN2 Only: Backup WAN1 - While connecting, the
router will use WAN1 for VPN connection. If WAN1 fails,
the router will use backup WAN2 interface instead.
Check to enable router always keep VPN connection.
IKE Authentication Method usually applies to those are
remote dial-in user or node (LAN to LAN) which uses
dynamic IP address and IPsec-related VPN connections
such as L2TP over IPsec and IPsec tunnel.
Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key-Confirm the pre-shared key.
Click Digital Signature to invoke this function. Use the
drop down list to choose one of the certificates for using.
You have to configure one certificate at least previously in
Certificate Management >> Local Certificate. Otherwise,
the setting you choose here will not be effective.
Peer ID – Choose the peer ID selection from the drop down
list.
Local ID – Choose Alternative Subject Name First or
Subject Name First.
Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is active.
High - Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPsec policy above.
The length of the use name is limited to 11 characters.
This field is used to authenticate for connection when you
select PPTP or L2TP with or without IPsec policy above.
The length of the password is limited to 11 characters.
Please type one LAN IP address (according to the real
location of the remote host) for building VPN connection.
Please type the network mask (according to the real location
of the remote host) for building VPN connection.
250