Draytek Vigor2760 series User Manual page 282

Vigor2760 Series User's Guide
the User Name and Password of remote dial-in user
below.

IPsec Tunnel- Allow the remote dial-in user to trigger
an IPsec VPN connection through Internet.

L2TP with IPsec Policy - Allow the remote dial-in
user to make a L2TP VPN connection through the
Internet. You can select to use L2TP alone or with
IPsec. Select from below:

None - Do not apply the IPsec policy.
Accordingly, the VPN connection employed the
L2TP without IPsec policy can be viewed as one
pure L2TP connection.

Nice to Have - Apply the IPsec policy first, if it
is applicable during negotiation. Otherwise, the
dial-in VPN connection becomes one pure L2TP
connection.

Must - Specify the IPsec policy to be definitely
applied on the L2TP connection.
Specify Remote VPN Gateway - You can specify the IP
address of the remote dial-in user or peer ID (should be the
same with the ID setting in dial-in type) by checking the
box. Also, you should further specify the corresponding
security methods on the right side.
If you uncheck the checkbox, the connection type you
select above will apply the authentication methods and
security methods in the general settings.
User Name - This field is applicable when you select PPTP
or L2TP with or without IPsec policy above. The length of
the name is limited to 11 characters.
Password - This field is applicable when you select PPTP
or L2TP with or without IPsec policy above. The length of
the password is limited to 11 characters.
VJ Compression - VJ Compression is used for TCP/IP
protocol header compression. This field is applicable when
you select PPTP or L2TP with or without IPsec policy
above.
IKE Authentication Method - This group of fields is
applicable for IPsec Tunnels and L2TP with IPsec Policy
when you specify the IP address of the remote node. The
only exception is Digital Signature (X.509) can be set when
you select IPsec tunnel either with or without specify the IP
address of the remote node.

Pre-Shared Key - Check the box of Pre-Shared Key
to invoke this function and type in the required
characters (1-63) as the pre-shared key.

Digital Signature (X.509) –Check the box of Digital
Signature to invoke this function and select one
predefined Profiles set in the VPN and Remote
Access >>IPsec Peer Identity.

Local ID – Specify which one will be inspected
first.
270