Chapter 22 VPN
VMG5313-B10A/-B30A Series User’s Guide
255
Local ID Content
When you select IP in the
Local ID Type
field, type the IP address of your computer in
this field. If you configure this field to 0.0.0.0 or leave it blank, the VMG automatically
uses the
Pre-Shared Key
(refer to the
Pre-Shared Key
field description).
It is recommended that you type an IP address other than 0.0.0.0 in this field or use the
DNS
or
type in the following situations.
•
When there is a NAT router between the two IPSec routers.
•
When you want the remote IPSec router to be able to distinguish between VPN
connection requests that come in from IPSec routers with dynamic WAN IP addresses.
When you select
DNS
or
in the
Local ID Type
field, type a domain name or e-
mail address by which to identify this VMG in this field. Use up to 31 ASCII characters
including spaces, although trailing spaces are truncated. The domain name or e-mail
address is for identification purposes only and can be any string.
Remote ID Type
Select
IP
to identify the remote IPSec router by its IP address.
Select
to identify the remote IPSec router by an e-mail address.
Select
DNS
to identify the remote IPSec router by a domain name.
Select
ASN1DN
to identify the remote IPSec router by the subject field in a certificate.
This is used only with certificate-based authentication.
Remote ID
Content
The configuration of the remote content depends on the remote ID type.
For
IP
, type the IP address of the computer with which you will make the VPN connection.
If you configure this field to 0.0.0.0 or leave it blank, the VMG will use the address in the
Remote IPSec Gateway Address
field (refer to the
Remote IPSec Gateway Address
field description).
For
DNS
or
, type a domain name or e-mail address by which to identify the
remote IPSec router. Use up to 31 ASCII characters including spaces, although trailing
spaces are truncated. The domain name or e-mail address is for identification purposes
only and can be any string.
It is recommended that you type an IP address other than 0.0.0.0 or use the
DNS
or
E-
ID type in the following situations:
•
When there is a NAT router between the two IPSec routers.
•
When you want the VMG to distinguish between VPN connection requests that come in
from remote IPSec routers with dynamic WAN IP addresses.
Advanced IKE
Settings
Click
more
to display advanced settings. Click
less
to display basic settings only.
NAT_Traversal
Select
Enable
if you want to set up a VPN tunnel when there are NAT routers between the
VMG and remote IPSec router. The remote IPSec router must also enable NAT traversal,
and the NAT routers have to forward UDP port 500 packets to the remote IPSec router
behind the NAT router. Otherwise, select
Disable
.
Phase 1
Mode
Select the negotiation mode to use to negotiate the IKE SA. Choices are:
Main
- this encrypts the VMG’s and remote IPSec router’s identities but takes more time
to establish the IKE SA.
Aggressive
- this is faster but does not encrypt the identities.
The VMG and the remote IPSec router must use the same negotiation mode.
Table 101
Security > IPSec VPN: Add/Edit
LABEL
DESCRIPTION
Summary of Contents for VMG5313-B10A
Page 15: ...15 PART I User s Guide ...
Page 16: ...16 ...
Page 32: ...Chapter 2 The Web Configurator VMG5313 B10A B30A Series User s Guide 32 ...
Page 40: ...Chapter 4 Tutorials VMG5313 B10A B30A Series User s Guide 40 ...
Page 71: ...71 PART II Technical Reference ...
Page 72: ...72 ...
Page 78: ...Chapter 5 Network Map and Status Screens VMG5313 B10A B30A Series User s Guide 78 ...
Page 106: ...Chapter 6 Broadband VMG5313 B10A B30A Series User s Guide 106 ...
Page 162: ...Chapter 9 Routing VMG5313 B10A B30A Series User s Guide 162 ...
Page 180: ...Chapter 10 Quality of Service QoS VMG5313 B10A B30A Series User s Guide 180 ...
Page 198: ...Chapter 11 Network Address Translation NAT VMG5313 B10A B30A Series User s Guide 198 ...
Page 210: ...Chapter 14 Interface Group VMG5313 B10A B30A Series User s Guide 210 ...
Page 218: ...Chapter 15 USB Service VMG5313 B10A B30A Series User s Guide 218 ...
Page 232: ...Chapter 17 Firewall VMG5313 B10A B30A Series User s Guide 232 ...
Page 240: ...Chapter 19 Parental Control VMG5313 B10A B30A Series User s Guide 240 ...
Page 250: ...Chapter 21 Certificates VMG5313 B10A B30A Series User s Guide 250 ...
Page 296: ...Chapter 23 Voice VMG5313 B10A B30A Series User s Guide 296 ...
Page 300: ...Chapter 24 Log VMG5313 B10A B30A Series User s Guide 300 ...
Page 308: ...Chapter 27 xDSL Statistics VMG5313 B10A B30A Series User s Guide 308 ...
Page 318: ...Chapter 30 Remote Management VMG5313 B10A B30A Series User s Guide 318 ...
Page 322: ...Chapter 32 TR 064 VMG5313 B10A B30A Series User s Guide 322 ...
Page 332: ...Chapter 36 Log Setting VMG5313 B10A B30A Series User s Guide 332 ...
Page 336: ...Chapter 37 Firmware Upgrade VMG5313 B10A B30A Series User s Guide 336 ...
Page 352: ...Chapter 40 Troubleshooting VMG5313 B10A B30A Series User s Guide 352 ...
Page 354: ...354 ...
Page 374: ...Appendix B Wireless LANs VMG5313 B10A B30A Series User s Guide 374 ...
Page 390: ...Appendix E Legal Information VMG5313 B10A B30A Series User s Guide 390 ...