Draytek VIGOR2950, User Manual

Page: 106 / 217

Vigor2950 Series User’s Guide 98
Password This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above.
PPP Authentication This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above. PAP/CHAP is the most
common selection due to wild compatibility.
VJ compression This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above. VJ Compression is used
for TCP/IP protocol header compression. Normally set to
Yes
to improve bandwidth utilization.
IKE Authentication
Method This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy.
Pre-Shared Key -Input 1-63 characters as pre-shared key.
Digital Signature (X.509) – Click this radio button to
invoke this function and select one predefined in the X.509
Peer ID Profiles (set from
VPN and Remote
Access>>IPSec Peer Identity ).
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy.
Medium Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High (ESP-Encapsulating Security Payload)- means
payload (data) will be encrypted and authenticated. Select
from below:
DES without Authentication -Use DES encryption algorithm
and not apply any authentication scheme.
DES with Authentication- Use DES encryption algorithm and
apply MD5 or SHA-1 authentication algorithm.
3DES without Authentication -Use triple DES encryption
algorithm and not apply any authentication scheme.
3DES with Authentication- Use triple DES encryption
algorithm and apply MD5 or SHA-1 authentication algorithm.
AES without Authentication -Use AES encryption algorithm
and not apply any authentication scheme.
AES with Authentication- Use AES encryption algorithm and
apply MD5 or SHA-1 authentication algorithm.
Advanced Specify mode, proposal and key life of each IKE phase,
Gateway etc.
The window of advance setup is shown as below: