InHand ER805 User Manual
23
Internet Interface
: specifies the local uplink interface used to establish the IPSec VPN tunnel.
Tunnel Mode
: specifies the IP packet encapsulation mode on the IPSec VPN tunnel, which can be tunnel mode or
transfer mode.
Peer Address
: specifies the IP address of the peer device that will establish a tunnel with the ER805.
Notes:
When two ER series routers establish an IPSec VPN tunnel, the one using a public IP address acts as the
server by default. On the IPSec server, the peer IP address must be set to 0.0.0.0. On the IPSec client, the peer IP
address must be set to the public IP address of the server's interface used to establish the tunnel.
Local Subnet
: specifies the IP address segment of the traffic to be sent out by the ER805 through the
IPSec VPN tunnel.
Peer Subnet
: specifies the IP address segment used for communication on the other end of the IPSec
VPN tunnel.
IKE Policy
: allows you to set IKE parameters.
Encryption
: specifies the encryption algorithm for IKE.
Authentication
: specifies the authentication algorithm for IKE.
DH Groups
: specifies the DH key exchange mode.
Lifetime
: specifies the lifetime of the IKE security association (SA). The default value is 86400
seconds.
IPSec Policy
: allows you to set IPSec parameters.
Security Protocol
: specifies the security protocol used for the External Router Protocol (ERP).
Encryption
: specifies the encryption algorithm for the Encapsulating Security Payload (ESP)
protocol.
Authentication
: specifies the authentication algorithm for ESP.
PFS Groups
: specifies the Perfect Forward Secrecy (PFS) mode, which improves the
communication security through an additional key exchange in Phase 2 of negotiation.
Lifetime
: specifies the lifetime of the IPSec SA. The default value is 86400 seconds.
10.2 L2TP VPN
Layer 2 Tunneling Protocol (L2TP) is a tunneling protocol for virtual private dial networks (VPDNs). This
protocol establishes a tunnel from a remote site to the headquarters of an enterprise over a public switched
telephone network (PSTN) or integrated services digital network (ISDN) through Point-to-Point Protocol
(PPP) negotiation. This tunnel allows remote users to connect to the intranet of the enterprise in a secure
way.
10.2.1 Client
The ER805 can serve as an L2TP client to establish a tunnel to a remote L2TP server. Choose
L2TP VPN
>
Client
on the
【
VPN
】
page, and click
Add
to add an L2TP client.