Page 55
Planning the VPN
When planning your VPN, you must make the following choices first:
1. If the remote site is a LAN network, the two end-point networks must have different LAN IP
address ranges. If the remote end-point is a single PC running a VPN client, its destination
address must be a single IP address with subnet mask of 255.255.255.255
2. Will you be using the Internet Key Exchange (IKE) setup, or Manual Keying? Whichever method is
used, you must specify each phase of the connection.
3. At least one side must have a fixed IP address. The other side with a dynamic IP address must
always be the initiator of the connection.
4. What encryption level will you use (DES, 3DES or AES)?
5. What authentication method will you use (MD5, SHA1 or SHA2)?
