Billion BiPAC 4700AZ, Руководство пользователя

Страница: 138 / 189

134
Active as Default Route: Enabled to let the tunnel to be the default route for traffic, under this
circumstance, all packets will be forwarded to this tunnel and routed to the next hop.
L2TP over IPSec
IPSec: This enables L2TP tunnel over IPSec
IKE Mode: IKE, Internet Key Exchange, is the mechanism to negotiate and exchange parameters
and keys between IPSec peers to establish security associations(SA). Select Main or Aggressive
mode.
IKE Local ID Type and Remote ID Type: When the mode of IKE is aggressive, Local and Remote
peers can be identified by other IDs.
IKE Pre-Shared Key: This is for the Internet Key Exchange (IKE) protocol, a string from 4 to 128
characters. Both sides should use the same key. IKE is used to establish a shared security policy and
authenticated keys for services (such as IPSec) that require a key. Before any IPSec traffic can be
passed, each router must be able to verify the identity of its peer. This can be done by manually
entering the pre-shared key into both sides (router or hosts).