Draytek Vigor 2950Gi User's Guide download pdf (Page 138)

Vigor2930 Series User’s Guide

130

Method

(LAN-to-LAN) which uses dynamic IP address and

IPSec-related VPN connections such as L2TP over IPSec

and IPSec tunnel.

Certificate for Dial-in – Choose the one you need.

Pre-Shared Key -Currently only support Pre-Shared Key

authentication.

Pre-Shared Key- Specify a key for IKE authentication

Confirm Pre-Shared Key- Retype the characters to confirm

the pre-shared key.

IPSec Security Method

Medium - Authentication Header (AH) means data will be

authenticated, but not be encrypted. By default, this option is

active.

High - Encapsulating Security Payload (ESP) means payload

(data) will be encrypted and authenticated. You may select

encryption algorithm from Data Encryption Standard (DES),

Triple DES (3DES), and AES.

To use digital certificate for peer authentication in either LAN-to-LAN connection or

Remote User Dial-In connection, here you may edit a table of peer certificate for selection.

As shown below, the router provides 100 entries of digital certificates for peer dial-in users.

Set to Factory Default Click it to clear all indexes.

Index Click the number below Index to access into the setting page

of IPSec Peer Identity.

Name Display the profile name of that index.

Click each index to edit one peer digital certificate. There are three security levels of digital

signature authentication: Fill each necessary field to authenticate the remote peer. The

following explanation will guide you to fill all the necessary fields.

1 2 ... 133 134 135 136 137 138 139 140 141 142 143 ... 297 298

No comments

Draytek Vigor 2950Gi User's Guide Page 138