peplink Pepwave Surf SOHO, Руководство пользователя

Страница: 57 / 151

PepVPN Profile Settings
Name This field is for specifying a name to represent this profile. The name can be any combination of
alphanumeric characters (0-9, A-Z, a-z), underscores (_), dashes (-), and/or non-leading/trailing
spaces ( ).
Active When this box is checked, this VPN connection profile will be enabled. Otherwise, it will be
disabled.
Encryption By default, VPN traffic is encrypted with 256-bit AES . If Off is selected on both sides of a VPN
connection, no encryption will be applied.
Authentication Select from By Remote ID Only , Preshared Key . When selecting By Remote ID Only , be sure to
enter a unique peer ID number in the Remote ID field.
Remote ID /
Pre-shared Key
This optional field becomes available when Remote ID / Pre-shared Key is selected as the
Pepwave Surf SOHO’s VPN Authentication method, as explained above. Pre-shared Key defines
the pre-shared key used for this particular VPN connection. The VPN connection's session key will
be further protected by the pre-shared key. The connection will be up only if the pre-shared keys on
each side match. When the peer is running firmware 5.0+, this setting will be ignored.
NAT Mode Check this box to allow the local DHCP server to assign an IP address to the remote peer. When
NAT Mode is enabled, all remote traffic over the VPN will be tagged with the assigned IP address
using network address translation.
Remote IP
Address / Host
Names (Optional)
If NAT Mode is not enabled, you can enter a remote peer’s WAN IP address or hostname(s) here.
If the remote uses more than one address, enter only one of them here. Multiple hostnames are
allowed and can be separated by a space character or carriage return. Dynamic-DNS host names
are also accepted.
This field is optional. With this field filled, the Pepwave Surf SOHO will initiate connection to each of
the remote IP addresses until it succeeds in making a connection. If the field is empty, the Pepwave
Surf SOHO will wait for connection from the remote peer. Therefore, at least one of the two VPN
peers must specify this value. Otherwise, VPN connections cannot be established.
Click the icon to configure data stream using TCP protocol [EXPERIMENTAL].In the case TCP
protocol is used, the exposed TCP session option can be authorised to work with TCP accelerated
WAN link.
Cost
Define path cost for this profile.
OSPF will determine the best route through the network using the assigned cost.
Default: 10
Data Port This field is used to specify a UDP or TCP port number for transporting outgoing VPN data. If
Default is selected, UDP port 4500 will be used. Port 32015 will be used if port 4500 is
unavailable. If Custom is selected, enter an outgoing port number from 1 to 65535.
Bandwidth Limit Define maximum download and upload speed to each individual peer. This functionality requires the
peer to use PepVPN version 4.0.0 or above.
Receive Buffer Receive Buffer can help to reduce out-of-order packets and jitter, but will introduce extra latency to
the tunnel. Default is 0 ms, which disable the buffer, and maximum buffer size is 2000 ms.
https://www.peplink.com 57 Copyright @ 2021 Peplink