Draytek Vigor2710 Series, Руководство пользователя

Страница: 217 / 335

Vigor2710 Series User’s Guide 205
connection through the Internet. You should set the User
Name and Password of remote dial-in user below.
IPSec Tunnel- Allow the remote dial-in user to trigger an
IPSec VPN connection through Internet.
L2TP with IPSec Policy - Allow the remote dial-in user to
make a L2TP VPN connection through the Internet. You can
select to use L2TP alone or with IPSec. Select from below:
None - Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
Nice to Have - Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-in VPN connection
becomes one pure L2TP connection.
Must - Specify the IPSec policy to be definitely applied on the
L2TP connection.
Specify Remote VPN
Gateway You can specify the IP address of the remote dial-in user or
peer ID (should be the same with the ID setting in dial-in type)
by checking the box. Also, you should further specify the
corresponding security methods on the right side.
If you uncheck the checkbox , the connection type you select
above will apply the authentication methods and security
methods in the general settings.
User Name This field is applicable when you select PPTP or L2TP with or
without IPSec policy above.
Password This field is applicable when you select PPTP or L2TP with or
without IPSec policy above.
VJ Compression VJ Compression is used for TCP/IP protocol header
compression. This field is applicable when you select PPTP or
L2TP with or without IPSec policy above.
IKE Authentication
Method This group of fields is applicable for IPSec Tunnels and L2TP
with IPSec Policy when you specify the IP address of the
remote node. The only exception is Digital Signature (X.509)
can be set when you select IPSec tunnel either with or without
specify the IP address of the remote node.
Pre-Shared Key - Check the box of Pre-Shared Key to invoke
this function and type in the required characters (1-63) as the
pre-shared key.
Digital Signature (X.509) – Check the box of Digital
Signature to invoke this function and select one predefined
Profiles set in the
VPN and Remote Access >>IPSec Peer
Identity .
IPSec Security Method This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node.
Medium- Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High- Encapsulating Security Payload (ESP) means payload
(data) will be encrypted and authenticated. You may select