
iB-WRA150N
150M Wireless-N ADSL2+ Router - User Guide
¾
Remote IPSec Gateway Address
: Enter the destination gateway IP address in the box
which is the public WAN IP or Domain Name of the remote VPN server endpoint. (For
example: Input 219.134.112.247 in Device1, Input 219.134.112.246 in Device 2)
¾
Tunnel access from local IP addresses
: Choose Subnet if you want the Whole LAN to join
the VPN network, or else choose Single Address if you want single IP to join the VPN
network.
¾
IP Address for VPN
: Enter the IP address of your LAN. (For example: Input 192.168.1.1 in
Device1, Input 192.168.2.1 in Device2)
¾
IP Subnetmask
: Enter the Subnet mask of your LAN. ( For example: Input 255.255.255.0 in
both Device1 and Device2)
¾
Tunnel access from remote IP addresses
: Choose Subnet if you want the Remote Whole
LAN to join the VPN network, or else choose Single Address if you want single IP to join the
VPN network.
¾
IP Address for VPN
: Enter the IP address of the Remote LAN. ( For example: Input
192.168.2.1 in Device1,Input 192.168.1.1 in Device2)
¾
IP Subnetmask
: Enter the subnetmask of the remote LAN. ( For example: Input
255.255.255.0 in both Device1 and Device2)
¾
Key Exchange Method
: Select Auto (IKE) or Manual.
¾
Authentication Method
: Select Pre-Shared Key (recommended) or Certificate (X.509).
¾
Pre-Shared Key
: Input the Pre-Shared key for Authentication. (For example: Input 12345678)
¾
Perfect Forward Secrecy
: PFS is an additional security protocol.
We recommend you leave the Advanced Settings as default value.
After complete the basic settings and click
Save/Apply
in both Device1 and Device2, PCs in LAN1
could communicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2
which is 192.168.2.100 in PC1)
)
Note:
The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect
Forward Secrecy settings.
Click
Show Advanced Settings
and then you can configure the Advanced Settings.
¾
Main Mode
: Select Main Mode to configure the standard negotiation parameters for IKE
phase1.
¾
Aggressive Mode
: Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to
carry out negotiation in a shorter amount of time. (Not Recommended-Less Secure)
)
Note:
The difference between the two is that aggressive mode will pass more information in fewer
packets, with the benefit of slightly faster connection establishment, at the cost of transmitting the
identities of the security firewall in the clear. When using aggressive mode, some configuration
parameters such as Diffie-Hellman groups, and PFS can not be negotiated, resulting in a greater
importance of having "compatible" configuration on both ends.
62