Draytek Vigor 3100 Series, User Manual, Page: 72 / 122

Vigor3100 Series User’s Guide 66
the timer, the router will drop this connection. By default, the
Idle Timeout is set to 300 seconds.
ISDN Allow the remote ISDN dial-in connection. You can further set
up Callback function below. You should set the User Name and
Password of remote dial-in user below
PPTP Allow the remote dial-in user to make a PPTP VPN connection
through the Internet. You should set the User Name and
Password of remote dial-in user below
IPSec Tunnel Allow the remote dial-in user to trigger a IPSec VPN
connection through Internet.
L2TP Allow the remote dial-in user to make a L2TP VPN connection
through the Internet. You can select to use L2TP alone or with
IPSec. Select from below:
None - Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
N
ice to Have - Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-in VPN connection
becomes one pure L2TP connection.
Must - Specify the IPSec policy to be definitely applied on the
L2TP connection.
Specify Remote Node Check the checkbox- You can specify the IP address of the
remote dial-in user or peer ID (should be the same as the ID you
set in the Local ID of IKE advanced settings window). Enter
Peer ISDN number if you select ISDN above. Also, you should
further specify the corresponding security methods on the right
side.
Uncheck the checkbox- This means the connection type you
select above will apply the authentication methods and security
methods in the
general settings .
User Name This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN.
Password This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN.
IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP
with IPSec Policy when you specify the IP address of the
remote node. The only exception is Digital Signature (X.509)
can be set when you select IPSec tunnel either w/ or w/o specify
the IP address of the remote node.
Pre-Shared Key - Input 1-63 characters as pre-shared key.
Digital Signature (X.509) - Select one predefined in the X.509
Peer ID Profiles.
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with
IPSec Policy when you specify the remote node.
Medium -Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High-Encapsulating Security Payload (ESP) means payload