TRENDnet TW100-BRV214, Руководство пользователя

Страница: 17 / 82

© Copyright 2012 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TW100-BRV214
14
6. Enter the network settings for the IPsec Site-to-Site VPN tunnel.
Note: Generally speaking if the LAN IP address setting of the router is 192.168.X.1 /
255.255.255.0, then the IP network will be identified as 192.168.X.0, X being any number
from 0-254.
• Local Subnet – The local LAN IP subnet or network of your local VPN router.
(e.g. 192.168.10.0)
•
Local Netmask – The local LAN subnet mask of your local VPN router.
(e.g. 255.255.255.0)
•
Remote Subnet – The remote LAN IP subnet or network of your remote VPN
router.
(e.g. 192.168.100.0)
•
Remote Netmask – The remote LAN subnet mask of your remote VPN router.
(e.g. 255.255.255.0)
•
Remote Gateway – The remote WAN (Internet) IP address of your remote VPN
router.
(e.g. 10.10.10.20) Note: If the remote router is using dynamic DNS, you
can enter domain for the remote gateway instead of the WAN IP address.
Based on the example, the network settings will be the following:
7. Next to Preshare Key , enter the preshared key for your IPsec tunnel.
Note: The value 1234567890 is shown as an example. It is strongly recommended to
enter your own preshared key for the IPsec VPN tunnel. Write down the preshared key
you enter as it will also need to be entered when configuring VPN Router B.
Note: The preshared key can consist of alphanumeric characters (a,b,C,?,*, /,1,2, etc.)
8. Click the
PFS Group drop-down list, and select Same as Phase 1.
9. Next to Dead Peer Detection (DPD) , check the Enable option.
10. Next to
IKE Proposal , check the Enable option. Next to ID 1 , click the Encryption
drop-down list and select AES-128 and click the DH Group drop-down list and select
Group 2
. Check the
Enable
option.
Note: The IKE proposal settings must match the setting configured in VPN Router A.