Draytek Vigor 3100 Series, Руководство пользователя

Страница: 75 / 122

Vigor3100 Series User’s Guide 69
Normally, if any one of VPN peers wants to disconnect the
connection, it should follow a serial of packet exchange
procedure to inform each other. However, if the remote peer
disconnect without notice, Vigor router will by no where to
know this situation. To resolve this dilemma, by continuously
sending PING packets to the remote host, the Vigor router can
know the true existence of this VPN connection and react
accordingly.
ISDN Build ISDN dial-out connection to the server. You should set up
Link Type and identity like User Name and Password for the
authentication of remote server. You can further set up Callback
(CBCP) function below.
PPTP Build a PPTP VPN connection to the server through the Internet.
You should set the identity like User Name and Password
below for the authentication of remote server.
IPSec Tunnel Build a IPSec VPN connection to the server through Internet.
L2TP- Build a L2TP VPN connection through the Internet. You can
select to use L2TP alone or with IPSec. Select from below:
None: Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
Nice to Have: Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-out VPN connection
becomes one pure L2TP connection.
Must: Specify the IPSec policy to be definitely applied on the
L2TP connection.
User Name This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN.
Password This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN.
PPP Authentication This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN. PAP/CHAP is the most common selection due to
wild compatibility.
VJ compression This field is applicable when you select PPTP or L2TP w/ or
w/out IPSec policy above. This field is also applicable if you
select ISDN. VJ Compression is used for TCP/IP protocol
header compression. Normally set to
Yes to improve bandwidth
utilization.
IKE Authentication Method This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy.
Pre-Shared Key -Input 1-63 characters as pre-shared key.
Digital Signature (X.509) - Select one predefined in the X.509
Peer ID Profiles
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP with
IPSec Policy.