D-Link DSR-1000N, User Manual

Page: 84 / 200

Unified Services Router User Manual
82
6.2 Configuring IPSec Policies
Setup > VPN Settings > IPSec > IPSec Policies
A IPSec policy is between this router and another gateway or this router and a IPSec
client on a remote host. The IPSec mode can be either tunnel or transport depending
on the network being traversed between the two policy endpoints.
•
Transport: This is used for end-to-end communication between this router and the
tunnel endpoint, either another IPSec gateway or an IPSec VPN client on a host.
Only the data payload is encrypted and the IP header is not modified or encrypted.
•
Tunnel: This mode is used for network-to-network IPSec tunnels where this
gateway is one endpoint of the tunnel. In this mode the entire IP packet including
the header is encrypted and/or authenticated.
When tunnel mode is selected, you can enable NetBIOS and DHCP over IPSec.
DHCP over IPSec allows this router to serve IP leases to hosts on the remote LAN. As
well in this mode you can define the single IP address, range of IPs, or subnet on both
the local and remote private networks that can communicate over the tunnel.