Draytek Vigor2850 Series, User Manual

Page: 221 / 387

Vigor2850 Series User’s Guide
211
Profiles set in the
VPN and Remote Access >>IPSec Peer
Identity.
IPSec Security Method
This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node.
Check the Medium, DES, 3DES or AES box as the security
method.
Medium-Authentication Header (AH)
means data will be
authenticated, but not be encrypted. By default, this option
is invoked. You can uncheck it to disable it.
High-Encapsulating Security Payload (ESP)
means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
Local ID -
Specify a local ID to be used for Dial-in setting
in the LAN-to-LAN Profile setup. This item is optional and
can be used only in IKE aggressive mode.
Callback Function
The callback function provides a callback service only for
the
ISDN
LAN-to-LAN connection (this feature is useful
for
“i”
model only). The remote user will be charged the
connection fee by the telecom.
Check to enable Callback function
-Enables the callback
function.
Specify the callback number -
The option is for extra
security. Once enabled, the router will ONLY call back to
the specified
Callback Number
.
Check to enable Callback budget Control
- By default,
the callback function has limitation of callback period.
Once the callback budget is exhausted, the function will be
disabled automatically.
Callback Budget -
Specify the time budget for the dial-in
user. The budget will be decreased automatically per
callback connection. The default value 0 means no
limitation of callback period.