Draytek Vigor2862 Series, Руководство пользователя

Страница: 426 / 988

Vigor2862 Series User’s Guide 410
Item Description
Name and Password of remote dial-in user below.
IPSec Tunnel - Allow the remote dial-in user to establish IPsec
tunnels.
IPsec XAuth - Allow the remote dial-in user to establish an
IPSec VPN connection through XAuth server in Internet.
L2TP with IPSec Policy - Allow the remote dial-in user to
establish L2TP VPN connections. You can select to use L2TP
alone or with IPSec. Select one of the following options:

None - Do not apply the IPSec policy. L2TP connections
are not encrypted.
 Nice to Have - Attempt to establish an IPsec secure
channel first, before starting an L2TP session. If an IPsec
secure channel cannot be established with the remote
client, fall back to an L2TP connection without
encryption.

Must - Require that an IPsec secure channel be
established before starting an L2TP connection.
Disconnect if an IPsec secure channel cannot be
established.
SSL Tunnel - Select to allow the remote dial-in user to initiate
SSL VPN tunnels.
OpenVPN Tunnel - Select to allow the remote dial-in user to
initiate OpenVPN tunnels.
IKEv2 EAP
–
Select to allow the remote dial-in user to initiate
IKEv2 tunnels.
Specify Remote Node - Select this option to specify the
remote IP address, ISDN number or peer ID (used in IKE
aggressive mode) used to authenticate the remote dial-in
user. If this option is not selected, the authentication and
security methods specified in the general settings will be used
instead.
Netbios Naming Packet
 Pass – Select this to allow Netbios name inquiries
between the hosts located on both sides of VPN Tunnel.

Block – Select this to block Netbios name inquiries
between remote and local hosts.
Multicast via VPN - Some programs might send multicast
packets via VPN connection.
 Pass –Select this to allow multicast packets to pass
through VPN connections.

Block –Select this to block multicast packets from passing
through the VPN connections. This is the default setting.
Subnet Select a subnet for this VPN profile.
Assign Static IP Address –If you would like to assign a static IP
address to this user, enter it here.
IKE Authentication
Method All fields in this section, except for Digital Signature (X.509),
are applicable to IPsec Tunnels and L2TP connections with
IPsec Policy when you specify the IP address of the remote
node (Remote Client IP in Specify Remote Node above).
Digital Signature (X.509) can be used with IPSec tunnels
regardless of the IP address of the remote node is specified or
not.
Pre-Shared Key - Select this checkbox to enable Pre-shared