SnapGear LITE, User Manual, Page: 88 / 95

Virtual Private Networking
84
Figure 7.13 Add new IPSec Connection
Enter a descriptive name for the connection in the Connection Name field.
Choosing to connect with Aggressive Mode increases interoperability with third party IPSec servers
that only support aggressive mode connections.
Enter the local gateway settings. The Internal subnet/netmask refers to the private network behind
the SnapGear VPN Router. The External IP refers to the public-network interface that the SnapGear
VPN Router will use for IPSec. The Authentication Identifier is required when using RSA key
signatures for multiple Road Warriors and is used to identify the other participant during
authentication. If this field is left blank, the Authentication Identifier defaults to the External IP.
Nexthop refers to the next-hop gateway IP address to the public network, which is not normally
required and may be left blank. This option is only available if you’ve chosen a specific route. It is
recommended that you use the default route. Enter the remote gateway settings. To connect to/from
a remote machine that does not have a fixed IP address, (e.g. a Road Warrior), enter an
External IP
of 0.0.0.0 only.