Eicon Networks SHIVA 1100, Руководство администратора, Страница: 72 / 136

VPN server
72 System Administrator’s Guide
• Enable PPTP Server: Enables the PPTP server.
• IP Addresses to Assign to VPN Clients: Enter the IP addresses for the tunnel
end-points. You need to specify a free IP address on your local network that
each VPN client will use when connecting to the Shiva VPN Gateway.
Please ensure that the IP addresses listed here are not in the range the
DHCP server can assign. Ranges are accepted, for example
192.168.160.250-254.
• IP Addresses to Assign to VPN Server: Select the port that the VPN tunnel
will be created on.
• Authentication Scheme: PPTP provides an authenticated tunnel between a
client and a gateway by using a user ID and password. The authentication
scheme is the method the Shiva VPN Gateway uses to challenge users
wanting to establish a PPTP connection to the network. The remote client
must be set up to use the selected authentication scheme.·
• MSCHAPv2 is the most secure option. MSCHAPv2 plus data encryption
is strongly recommended. This keeps your data private as well as
providing secure authentication.
• CHAP is less secure·
• PAP (although more common) is even less secure.·