Draytek Vigor2960, Руководство пользователя

Страница: 318 / 446

Vigor2960 Series User’s Guide 310
default setting (leave it in blank).
Remote Host Type the WAN IP address for the remote host.
Remote IP / Subnet
Mask Type the LAN IP address and LAN subnet mask for the
remote host.
More Remote
Subnet Add more remote subnet in this field if required.
Aggressive Mode The ultimate outcome is to exchange security proposals to
create a protected secure channel.
Main mode is more secure
than Aggressive mode since more exchanges are done in a
secure channel to set up the IPSec session. However, the
Aggressive mode is faster. The default value in Vigor router
is Main mode.
Local ID – Type the ID for Vigor router which can be
configured by the remote end. It is available only when
Aggressive Mode is enabled.
Remote ID – It is on behalf of the IP address while identity
authentication with remote VPN server. The length of ID is
limited to 47 characters.
It is available only when Aggressive
Mode is enabled.
Auth Type The authentication to be used by Pre-Shared Key or RSA
Signature. Choose
PSK or RSA for such profile.
Preshared Key Type a pre-shared key for authentication if PSK is selected
as Auth Type.
Security Protocol Choose ESP to specify the IPsec protocol for the
Encapsulating Security Payload protocol. The data will be
encrypted and authenticated. Choose
AH to specify the IPsec
protocol for the Authentication Header protocol. The data
will be authenticated but not be encrypted.
DPD Delay DPD means dead peer detection. It is a keep-alive timer. A
Hello message will be emitted periodically when a tunnel is
idle. Use the value 0 to disable this function. The
recommended value is 30 seconds if enabled.
DPD Timeout It is the timeout timer. The peer will be declared dead once
no acknowledge message is received after timeout value.
Use the value 0 to disable this function. The recommended
value is 120 seconds if enabled.