ADTRAN SMART/RG SR506n, Руководство пользователя

Страница: 99 / 161

SmartRG Inc., an ADTRAN company. All Rights Reserved. © 2020 99
Field Name Description
Tunnel Mode Select the encapsulation method to be used. Options are:
l
AH : Use this mode to encapsulate a packet with AH and IP headers. For
authentication, the entire packet is signed.
l
ESP : Use this mode to encapsulate a packet with ESP and IP headers. An
ESP trailer is added to the packet for authentication and integrity.
WAN Interface Select the WAN connection to be associated with this tunnel.
Remote Security Gateway Enter the WAN IP for this tunnel.
To allow anonymous connections, click the Anonymous checkbox.
LAN-side VPN Select whether to allow access to the entire LAN or a single host for local IP
addresses. Options are:
l
Subnet : Allows access to the entire LAN.
l
Single Address : For single host, select this option.
IP Address Enter the IP address used for local access.
Mask or Prefix Length Enter the subnet mask or prefix length for IP address entered for local access.
The default is
255.255.255.0 .
Local ID Type
Select the type of ID for the local VPN. Options are Default , Domain , and E-Mail .
The default is Default .
When you select Domain or E-Mail , enter the domain name or email address in
the ID Content field.
Remote-side VPN Select whether to allow access to the entire LAN or a single host for remote IP
addresses. Options are:
l
Subnet : Allows access to the entire LAN.
l
Single Address : Allows access to a single host.
IP Address Enter the IP address used for remote access.
Mask or Prefix Length Enter the subnet mask or prefix length for IP address entered for remote access.
The default is
255.255.255.0
.
Remote ID Type
Select the type of ID for the remote VPN. Options are Default , Domain , and E-
Mail . The default is Default .
When you select Domain or E-Mail , enter the domain name or email address in
the ID Content field.
Key Exchange Method Select the key-exchange method to be used for IPSec. Options are:
l
Auto(IKE) : This method uses the negotiated key-exchange method for
IPSec. This is the default and recommended for best results.