D-Link DIR-825/AC User Manual page 171

DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
with 3G/CDMA/LTE Support and USB Port
User Manual
!
Setting for both devices which establish the tunnel should be the same.
You can specify the following parameters:
Parameter
Local subnet
Destination
Remote IP
Key
Encryption algorithm
Hashing algorithm
Interface
Authentication
algorithm
IKE-SA lifetime
IPsec-SA lifetime
Click the Apply button.
To edit the parameters of an existing tunnel, select the relevant tunnel in the table. On the opened
page, change the needed parameters and click the Apply button.
To remove a tunnel, select the checkbox located to the left of the relevant line in the table and click
the Delete button.
To disable VPN tunnels based on IPsec protocol, deselect the Enabled checkbox.
A local subnet IP address and subnet mask. To configure a host IP
address, add /32.
A remote subnet IP address and subnet mask. To configure a host IP
address, add /32.
A remote subnet VPN gateway IP address.
A key for mutual authentication of the parties.
Select encryption algorithm from the drop-down list.
Select hashing algorithm from the drop-down list.
Select a WAN connection through which the tunnel will pass. When
the <auto> value is selected, the router uses the connection set as the
default gateway.
Select authentication algorithm from the drop-down list.
The lifetime of IKE-SA keys in seconds. After the specified period it is
required to renegotiate the keys. The value specified in this field
should exceed the value specified in the IPsec-SA lifetime field.
Specify 0 if you don't want to limit the lifetime of the keys.
The lifetime of IPsec-SA keys in seconds. After the specified period it
is required to renegotiate the keys. Specify 0 if you don't want to limit
the lifetime of the keys.
Page 171 of 220
Configuring via Web-based Interface
Description