Chapter 22 VPN
VMG5313-B10A/-B30A Series User’s Guide
254
IP Address for
VPN
If
Single Address
is selected, enter a (static) IP address on the LAN behind your VMG.
If
Subnet
is selected, specify IP addresses on a network by their subnet mask by entering
a (static) IP address on the LAN behind your VMG. Then enter the subnet mask to identify
the network address.
IP Subnetmask
If
Subnet
is selected, enter the subnet mask to identify the network address.
Tunnel access
from remote IP
addresses
Select
Single Address
to have only one remote LAN IP address use the VPN tunnel.
Select
Subnet
to specify remote LAN IP addresses by their subnet mask.
IP Address for
VPN
If
Single Address
is selected, enter a (static) IP address on the LAN behind the remote
IPSec’s router.
If
Subnet
is selected, specify IP addresses on a network by their subnet mask by entering
a (static) IP address on the LAN behind the remote IPSec’s router. Then enter the subnet
mask to identify the network address.
IP Subnetmask
If
Subnet
is selected, enter the subnet mask to identify the network address.
Protocol
Select which protocol you want to use in the IPSec SA. Choices are:
AH
(RFC 2402) - provides integrity, authentication, sequence integrity (replay
resistance), and non-repudiation but not encryption. If you select
AH
, you must select an
Integraty
Algorithm
.
ESP
(RFC 2406) - provides encryption and the same services offered by
AH
, but its
authentication is weaker. If you select
ESP
, you must select an
Encryption Agorithm
and
Integraty Algorithm
.
Both
AH
and
ESP
increase processing requirements and latency (delay). The VMG and
remote IPSec router must use the same active protocol.
Key Exchange
Method
Select the key exchange method:
Auto(IKE)
- Select this to use automatic IKE key management VPN connection policy.
Manual
- Select this option to configure a VPN connection policy that uses a manual key
instead of IKE key management. This may be useful if you have problems with IKE key
management.
Note: Only use manual key as a temporary solution, because it is not as secure as a regular
IPSec SA.
Authentication
Method
Select
Pre-Shared Key
to use a pre-shared key for authentication, and type in your pre-
shared key. A pre-shared key identifies a communicating party during a phase 1 IKE
negotiation. It is called "pre-shared" because you have to share it with another party
before you can communicate with them over a secure connection.
Select
Certificate (X.509)
to use a certificate for authentication.
Pre-Shared Key
Type your pre-shared key in this field. A pre-shared key identifies a communicating party
during a phase 1 IKE negotiation.
Type from 8 to 31 case-sensitive ASCII characters or from 16 to 62 hexadecimal ("0-9",
"A-F") characters. You must precede a hexadecimal key with a "0x” (zero x), which is not
counted as part of the 16 to 62 character range for the key. For example, in
"0x0123456789ABCDEF", “0x” denotes that the key is hexadecimal and
“0123456789ABCDEF” is the key itself.
Local ID Type
Select
IP
to identify the VMG by its IP address.
Select
to identify this VMG by an e-mail address.
Select
DNS
to identify this VMG by a domain name.
Select
ASN1DN
(Abstract Syntax Notation one - Distinguished Name) to this VMG by the
subject field in a certificate. This is used only with certificate-based authentication.
Table 101
Security > IPSec VPN: Add/Edit
LABEL
DESCRIPTION
Summary of Contents for VMG5313-B10A
Page 15: ...15 PART I User s Guide ...
Page 16: ...16 ...
Page 32: ...Chapter 2 The Web Configurator VMG5313 B10A B30A Series User s Guide 32 ...
Page 40: ...Chapter 4 Tutorials VMG5313 B10A B30A Series User s Guide 40 ...
Page 71: ...71 PART II Technical Reference ...
Page 72: ...72 ...
Page 78: ...Chapter 5 Network Map and Status Screens VMG5313 B10A B30A Series User s Guide 78 ...
Page 106: ...Chapter 6 Broadband VMG5313 B10A B30A Series User s Guide 106 ...
Page 162: ...Chapter 9 Routing VMG5313 B10A B30A Series User s Guide 162 ...
Page 180: ...Chapter 10 Quality of Service QoS VMG5313 B10A B30A Series User s Guide 180 ...
Page 198: ...Chapter 11 Network Address Translation NAT VMG5313 B10A B30A Series User s Guide 198 ...
Page 210: ...Chapter 14 Interface Group VMG5313 B10A B30A Series User s Guide 210 ...
Page 218: ...Chapter 15 USB Service VMG5313 B10A B30A Series User s Guide 218 ...
Page 232: ...Chapter 17 Firewall VMG5313 B10A B30A Series User s Guide 232 ...
Page 240: ...Chapter 19 Parental Control VMG5313 B10A B30A Series User s Guide 240 ...
Page 250: ...Chapter 21 Certificates VMG5313 B10A B30A Series User s Guide 250 ...
Page 296: ...Chapter 23 Voice VMG5313 B10A B30A Series User s Guide 296 ...
Page 300: ...Chapter 24 Log VMG5313 B10A B30A Series User s Guide 300 ...
Page 308: ...Chapter 27 xDSL Statistics VMG5313 B10A B30A Series User s Guide 308 ...
Page 318: ...Chapter 30 Remote Management VMG5313 B10A B30A Series User s Guide 318 ...
Page 322: ...Chapter 32 TR 064 VMG5313 B10A B30A Series User s Guide 322 ...
Page 332: ...Chapter 36 Log Setting VMG5313 B10A B30A Series User s Guide 332 ...
Page 336: ...Chapter 37 Firmware Upgrade VMG5313 B10A B30A Series User s Guide 336 ...
Page 352: ...Chapter 40 Troubleshooting VMG5313 B10A B30A Series User s Guide 352 ...
Page 354: ...354 ...
Page 374: ...Appendix B Wireless LANs VMG5313 B10A B30A Series User s Guide 374 ...
Page 390: ...Appendix E Legal Information VMG5313 B10A B30A Series User s Guide 390 ...