D-Link DSR-1000N, User Manual

Page: 83 / 200

Unified Services Router User Manual
81
•
Local WAN IP address / FQDN: This field can be left blank if you are not using a
different FQDN or IP address than the one specified in the WAN port’s
configuration.
3.
Step 3: Configure the Secure Connection Remote Accessibility fields to identify the
remote network:
•
Remote LAN IP address: address of the LAN behind the peer gateway
•
Remote LAN Subnet Mask: the subnet mask of the LAN behind the peer
Note: The IP address range used on the remote LAN must be different from the IP
address range used on the local LAN.
4.
Step4: review the settings and click Connect to establish the tunnel.
The Wizard will create a Auto IPSec policy with the following default values for a
VPN Client or Gateway policy (these can be accessed from a link on the Wizard
page):
Parameter Default value from Wizard
Exchange Mode Aggressive (Client policy ) or Main (Gateway policy)
ID Type FQDN
Local WAN ID wan_local.com (only applies to Client policies)
Remote WAN ID wan_remote.com (only applies to Client policies)
Encryption Algorithm 3DES
Authentication Algorithm SHA-1
Authentication Method Pre-shared Key
PFS Key-Group DH-Group 2(1024 bit)
Life Time (Phase 1) 24 hours
Life Time (Phase 2) 8 hours
NETBIOS Enabled (only applies to Gateway policies)
The VPN Wizard is the recommended method to set up an Auto IPSec policy.
Once the Wizard creates the matching IKE and VPN policies required by the Auto
policy, one can modify the required fields through the edit link. Refer to the online
help for details.