D-Link DFL-900 User Manual page 134

Part V
Virtual Private Network
At DFL-1:
At the first, we will install the IPSec properties of DFL-1. For the related explanation, please refer to Chapter 12 and Chapter
13.
Step 8. Enable IPSec
Check the Enable IPSec checkbox and click
Apply.
Step 9. Add an IKE rule
Click the IKE hyperlink and click Add to add a
new IPSec VPN tunnel endpoint.
Step 10. Customize the rule
Check the Active checkbox. Enter a name for
this rule like IKErule. Enter the Local IP
(192.168.40.0/255.255.255.0)
Address
and the
Remote
(192.168.88.0/255.255.255.0). Select the
Outgoing Interface of this VPN/Firewall
Router. Select Dynamic IP in the Peer's IP
Address. Be sure to select Aggressive mode
for the dynamic remote gateway address type.
Click the ESP Algorithm and select Encrypt
and Authenticate (DES, MD5). Enter the
Pre-Shared Key as 1234567890. Click the
Apply button to store the settings. Note, In the
Action region. It should choose either ESP
Algorithm or AH Algorithm, or system will
show error message. If you hope to set the
detailed item of IKE parameter. Click the
Advanced button in this page. Otherwise it is ok to
just leave the value default.
Note that Peers Identifier must NOT be IP
Address type in the Dynamic IP type. So, you
have to select FQDN (domain name) or user
FQDN (mailbox) as the Peer's Identifier.
D-Link
ADVANCED SETTINGS > VPN Settings > IPSec
ADVANCED SETTINGS > VPN Settings > IPSec > IKE
ADVANCED SETTINGS > VPN Settings > IPSec > IKE > Add
IP Address
Self local IP
Address
The opposite
side IP Address
126