Prestige 794M User’s Guide
89
Chapter 7 VPN
The following table describes the labels in this screen.
Table 46
VPN: L2TP: Create: Remote Access Connection
LABEL
DESCRIPTION
Connection Name
Enter a descriptive name for identification purposes.
Type
Select
Dial Out
to set the Prestige to act as a client (connecting to a remote
VPN server).
Select
Dial In
to set the Prestige to act as a VPN server.
Server IP Address (or
Domain Name)
This field is applicable when you select
Dial
Out
in the
Type
field
Enter the IP address or the domain name of the remote VPN device.
Private IP Address
Assigned to Dial in
User
This field is applicable when you select
Dial
In
in the
Type
field.
Enter the IP address (in dotted decimal notation) to assign to the remote VPN
client that initiates the VPN connection. For example, 192.168.1.10.
Username
If you select
Dial Out
in the
Type
field, enter the username provided.
If you select
Dial In
in the
Type
field, enter a username to be used when
establishing a VPN connection.
Password
Enter the password associated with the username above.
Authentication Type
Specify the authentication type to use when accepting or establishing a VPN
connection. Choices are
PAP
(Password Authentication Protocol) and
CHAP
(Challenge Handshake Authentication Protocol). The default is
CHAP
.
When you select PAP, password is sent unencrypted. While CHAP provides
better security by encrypting the password before transmission and
reauthenticates the VPN client to protect against identity theft.
Idle Time
Specify the time interval in minutes (where there is no traffic between the
Prestige and the computer) that can elapse before the Prestige automatically
disconnects the connection.
Enter
0
to allow connection up all the time.
Active as default route Select this option to set this VPN connection as a default route.
IPSec
Select this option to enable IPSec security for your LT2P VPN connection.
Authentication
Specify the method to authenticate data packet in this field. Choices are
None
,
MD5
and
SHA1
.
Select
None
to disable authentication.
Select
MD5
(Message Digest 5)
for minimal security and
SHA1
(Secure Hash
Algorithm) for maximum security.
Encryption
Specify the method to encrypt data packet in this field. Choices are
NULL
,
DES
,
3DES
,
AES128
,
AES 192
and
AES 256
.
When
DES
is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. The DES
encryption algorithm uses a 56-bit key.
Triple DES (
3DES
) is a variation on DES that uses a 168-bit key. As a result,
3DES
is more secure than
DES
. It also requires more processing power,
resulting in increased latency and decreased throughput.
For this implementation, select
AES 128
,
AES 192
or
AES 256
that uses
different encryption key lengths.
AES
is faster than
3DES
.
elect
NULL
to set up a tunnel without encryption. When you select
NULL
, you
do not enter an encryption key.
