Ipsec Peer Identity - Draytek Vigor 2925 Series User Manual

IPSec Security Method
After finishing all the settings here, please click OK to save the configuration.
4 . 1 2 . 4 I P S e c P e e
4 . 1 2 . 4 I P S e c P e e
To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote
User Dial-In connection, here you may edit a table of peer certificate for selection. As shown
below, the router provides 64 entries of digital certificates for peer dial-in users.
Available settings are explained as follows:
Item
Set to Factory Default
from remote dial-in user, Certificate (X.509) and
Pre-Shared Key.
Certificate for Dial-in –Choose one of the local certificates
from the drop down list.
Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key- Retype the characters to
confirm the pre-shared key.
Note: Any packets from the remote dial-in user which does
not match the rule defined in VPN and Remote
Access>>Remote Dial-In User will be applied with the
method specified here.
Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is active.
High (ESP) - Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
r I d e n t i t y
r I d e n t i t y
Description
Click it to clear all indexes.
355
Vigor2925 Series User's Guide