Linksys LRT214, Руководство пользователя

Страница: 59 / 77

55
VPN
Linksys
Remote Client Setup for Group VPN
Specify the method for identifying the clients to establish the VPN tunnel. The
following options are available for a Group VPN.
Domain
Name (FQDN)
Authentication: Enter a domain name to use for authenticating remote
users. The domain name must be unique for each
tunnel.
E-mail Address
(USER FQDN)
Authentication: Enter an email address for authenticating remote
users. The email address must be unique for each
tunnel.
Microsoft XP/2000
VPN Client: Select this option if the clients use VPN client software
built in to Microsoft XP/2000.
IPSec Setup
Enter the Internet Protocol Security settings for this tunnel.
NOTE The configuration on remote client software should be the same as the
local router.
Keying Mode: Manual: If you want to configure a self-defined key
without negotiation. Encryption key and Authentication
key will be used to verify remote users.
Note: Manual mode is not supported in Group VPN mode.
IKE with Preshared Key:If you want to authenticate
remote users by a pre-shared key and then negotiate the
second key in phase 2. IKE with Pre-shared Key is selected
by default.
• Manual mode
Enter the settings for manual mode. Be sure to enter the same settings when
configuring the other end router for this tunnel.
Incoming SPI: Input a number between 100~ffffffff as SPI
(Security Parameter Index). SPI is an identification
tag of an IPSec association. The incoming SPI of
this router should be the same as the outgoing SPI
of the other end of the tunnel.
Outgoing SPI:
Input a number between 100~ffffffff as SPI. The
outgoing SPI of this router should be the same as
the incoming SPI of the other end of the tunnel.
Encryption: DES or 3DES.
Authentication: MD5 or SHA1.
Encryption Key: Input number as encryption key. You should enter
16 numbers for DES method or 48 numbers for
3DES method.
If you enter less than required values, zeroes will
be filled in to empty spaces. Example: If you enter
12345678 for DES encryption, the box will show
“1234567800000000.”
Authentication Key:
Input number as authentication key. You should
enter 32 numbers for MD5 method or 40 numbers
for SHA1 method.