Draytek VigorPro 5510 Series, User Manual

Page: 172 / 316

VigorPro5510 Series User’s Guide 162
set to Yes to improve bandwidth utilization.
IKE Authentication
Method This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy.
Pre-Shared Key -Input 1-63 characters as pre-shared key.
Digital Signature (X.509) – This setting will be available
when IPSec Tunnel is selected. Click this radio button to
invoke this function and select one predefined profile in the
Peer ID (set from
VPN and Remote Access>>IPSec Peer
Identity ).
Peer ID – Display the IPSec Peer Identity profiles. Use the
drop down menu to choose any one desired.
Local ID – There are two selections offered here. Choose
Alternative Subject Name First or choose Subject Name
First based on the local certificate selected below.
Local Certificate - When the router (served as the client)
executes LAN to LAN dial out with IPSec mode, it will
transfer the certificate to the server based on the setting
selected here. Please use the drop down list to choose one of
the certificates configured in
Certificate
Management>>Local Certificate .
IPSec Security Method
This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy.
Medium (AH - Authentication Header) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High (ESP-Encapsulating Security Payload)- means
payload (data) will be encrypted and authenticated. Select
from below:
DES without Authentication -Use DES encryption
algorithm and not apply any authentication scheme.
DES with Authentication- Use DES encryption algorithm
and apply MD5 or SHA-1 authentication algorithm.
3DES without Authentication -Use triple DES encryption
algorithm and not apply any authentication scheme.
3DES with Authentication- Use triple DES encryption
algorithm and apply MD5 or SHA-1 authentication
algorithm.
AES without Authentication -Use AES encryption
algorithm and not apply any authentication scheme.
AES with Authentication- Use AES encryption algorithm
and apply MD5 or SHA-1 authentication algorithm.
Advanced - Specify mode, proposal and key life of each
IKE phase, Gateway etc. The window of advance setup is
shown as below: