Ubee DDW2600 Subscriber User Manual page 68

4.4.3 VPN - Configure
64
Add New Tunnel Once a tunnel Name is entered, click this button to add the tunnel.
Apply Select to either Enable or Disable the tunnel. Click Apply to save
your changes.
Address Group Configure the local network that will be protected by the IPSec VPN
Type located in your cable modem/router's LAN side. Choose the local
address type:



Subnet Enter the subnet.
Mask Enter the subnet mask.
Identity Type Select the identity type to identify this cable modem by:




In Aggressive mode, the VPN concentrator identifies incoming SAs
by ID type and content, since this identifying information is not
encrypted, to distinguish between multiple rules for SAs that connect
from remote IPSec routers that have dynamic WAN IP addresses.
In Main mode, the ID type and content are encrypted to provide
identity protection. In this case VPN concentrator can only
distinguish between up to 30 different incoming SAs that connect
from remote IPSec routers that have dynamic WAN IP addresses.
Because you can select between five encryption algorithms (DES,
3DES, AES-128, AES-192 and AES-256), two authentication
algorithms (MD5 and SHA1) and three key groups (DH1 and DH2,
DH5) when you configure a VPN rule. The ID type and content act
as an extra level of identification for incoming SAs.
Identity Enter the value corresponding to the selected Identity type.
Address Group Select the address group type:
Type



Subnet Enter the subnet.
Mask Enter the subnet mask.
Identity Type Select the identity type to identify this cable modem by:




Identity Enter the value corresponding to the selected Identity Type.
DDW2600 Wireless & DDC2700 Commercial Cable Modem/Router Subscriber User Guide • May, 2010
IP Subnet, to protect the whole subnet.
Single IP address, to protect a single PC.
IP address range, to protect several PCs.
WAN IP (remote endpoint) address
IP address
FQDN
Email address
IP Subnet, to protect the whole subnet.
Single IP address, to protect a single PC.
IP address range, to protect several PCs.
WAN IP (remote end point) address
IP address
FQDN
Email address
Ubee Interactive