Draytek Vigor IPPBX 2820n, Руководство пользователя

Страница: 311 / 378

VigorIPPBX 2820 Series User’s Guide 303
becomes one pure L2TP connection.
Must - Specify the IPSec policy to be definitely applied on
the L2TP connection.
Specify Remote Node Check the checkbox- You can specify the IP address of the
remote dial-in user, ISDN number or peer ID (used in IKE
aggressive mode).
Uncheck the checkbox- This means the connection type you
select above will apply the authentication methods and
security methods in the
general settings .
Netbios Naming Packet Pass – click it to have an inquiry for data transmission
between the hosts located on both sides of VPN Tunnel
while connecting.
Block – When there is conflict occurred between the hosts
on both sides of VPN Tunnel in connecting, such function
can block data transmission of Netbios Naming Packet inside
the tunnel.
Multicast via VPN Some programs might send multicast packets via VPN
connection.
Pass – Click this button to let multicast packets pass through
the router.
Block – This is default setting. Click this button to let
multicast packets be blocked by the router.
User Name This field is applicable when you select ISDN, PPTP or
L2TP with or without IPSec policy above.
Password This field is applicable when you select ISDN, PPTP or
L2TP with or without IPSec policy above.
Enable Mobile One-Time
Password (mOTP)
Check this box to make the authentication with mOTP
function.
PIN Code – Type the code for authentication (e.g, 1234).
Secret – Use the 32 digit-secret number generated by mOTP
in the mobile phone (e.g., e759bb6f0e94c7ab4fe6).
IKE Authentication
Method This group of fields is applicable for IPSec Tunnels and
L2TP with IPSec Policy when you specify the IP address of
the remote node. The only exception is Digital Signature
(X.509) can be set when you select IPSec tunnel either with
or without specify the IP address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to
invoke this function and type in the required characters
(1-63) as the pre-shared key.
Digital Signature (X.509) – Check the box of Digital
Signature to invoke this function and Select one predefined
Profiles set in the
VPN and Remote Access >>IPSec Peer
Identity.
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node. Check
the Medium, DES, 3DES or AES box as the security method.
Medium - Authentication Header (AH) means data will be