Draytek Vigor2762 series, Руководство пользователя

Страница: 207 / 651

dial-in user, Certificate (X.509) and Pre-Shared Key .
Certificate for Dial-in –Choose one of the local certificates
from the drop down list.
Pre-Shared Key- Specify a key for IKE authentication.
Confirm Pre-Shared Key- Retype the characters to confirm
the pre-shared key.
Note : Any packets from the remote dial-in user which does
not match the rule defined in VPN and Remote
Access>>Remote Dial-In User will be applied with the
method specified here.
IPsec Security Method Medium - Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option
is active.
High (ESP) - Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
After finishing all the settings here, please click OK to save the configuration.
IV-1- IV-1- 4 4 IPsec Peer Identity IPsec Peer Identity
To use digital certificate for peer authentication in either LAN-to-LAN connection or Remote
User Dial-In connection, here you may edit a table of peer certificate for selection. As
shown below, the router provides
32 entries of digital certificates for peer dial-in users.
Available settings are explained as follows:
Item Description
Set to Factory Default Click it to clear all indexes.
Index Click the number below Index to access into the setting
page of IPsec Peer Identity.
Vigor2762 Series User’s Guide 197