Draytek VigorIPPBX 2820 Series, User Manual

Page: 264 / 379

VigorIPPBX 2820 Series User’s Guide 254
Must - Specify the IPSec policy to be definitely applied
on the L2TP connection.
Specify CLID or Remote
VPN Gateway
You can specify the IP address of the remote dial-in user
or peer ID (should be the same with the ID setting in
dial-in type) by checking the box. Enter Peer ISDN
number if you select ISDN above. Also, you should
further specify the corresponding security methods on the
right side.
If you uncheck the checkbox , the connection type you
select above will apply the authentication methods and
security methods in the general settings.
User Name This field is applicable when you select ISDN, PPTP or
L2TP with or without IPSec policy above.
Password This field is applicable when you select ISDN, PPTP or
L2TP with or without IPSec policy above.
VJ Compression VJ Compression is used for TCP/IP protocol header
compression. This field is applicable when you select
ISDN, PPTP or L2TP with or without IPSec policy above.
IKE Authentication
Method This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy when you specify the IP address
of the remote node. The only exception is Digital
Signature (X.509) can be set when you select IPSec tunnel
either with or without specify the IP address of the remote
node.
Pre-Shared Key - Check the box of Pre-Shared Key to
invoke this function and type in the required characters
(1-63) as the pre-shared key.
Digital Signature (X.509) – Check the box of Digital
Signature to invoke this function and select one
predefined Profiles set in the
VPN and Remote Access
>>IPSec Peer Identity .
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node.
Medium- Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is active.
High- Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
Callback Function The callback function provides a callback service only for
the ISDN LAN-to-LAN connection. The remote user will
be charged the connection fee by the telecom.
Check to enable Callback function -Enables the callback
function.
Callback number -The option is for extra security. Once
enabled, the router will ONLY call back to the specified
Callback Number.