Draytek Vigor2133 Vac, User Manual

Page: 648 / 706

Vigor2133 Series User’s Guide 636
This command allows users to set advanced parameters for LAN to LAN function.
S
S
y
y
n
n
t
t
a
a
x
x
vpn l2lset [list index] peerid [peerid]
vpn l2lset [list index] localid [localid]
vpn l2lset [list index]main [auto/proposal index]
vpn l2lset [list index] aggressive [g1/g2]
vpn l2lset [list index]pfs [on/off]
vpn l2lset [list index] phase 1 [lifetime]
vpn l2lset [list index] phase2[lifetime]
vpn l2lset [list index] x509localid [0/1]
S
S
y
y
n
n
t
t
a
a
x
x
D
D
e
e
s
s
c
c
r
r
i
i
p
p
t
t
i
i
o
o
n
n
Parameter Description
list index It means the index number of L2L (LAN to LAN) profile.
peerid It means the peer identity for aggressive mode.
localid It means the local identity for aggressive mode.
main It means to choose proposal for main mode.
auto index It means to choose default proposals.
proposal index It means to choose specified proposal.
aggressive It means the chosen DH group for aggressive mode
pfs It means “perfect forward secrete”.
on/off It means to turn on or off the PFS function.
phase1 It means phase 1 of IKE.
lifetime It means the lifetime value (in second) for phase 1 and phase 2.
phase2 It means phase 2 of IKE.
X509localid It means the local identity for X509 server.
E
E
x
x
a
a
m
m
p
p
l
l
e
e
> vpn l2lset 1 peerid test
T T e e l l n n e e t t C C o o m m m m a a n n d d : : v v p p n n d d i i n n s s e e t t
This command allows users to configure setting for remote dial-in VPN profile.
S
S
y
y
n
n
t
t
a
a
x
x
vpn dinset <list index>
vpn dinset <list index> <on/off>
vpn dinset <list index> username <USERNAME>
vpn dinset <list index> password <PASSWORD>
vpn dinset <list index> motp <on/off>
vpn dinset <list index> pin_secret <pin> <secret>
vpn dinset <list index> timeout <0~9999>