Draytek vigor2960 series User Manual page 329

Remote Host
Remote IP / Subnet
Mask
More Remote Subnet
H o w t o
H o w t o
The IPsec services can provide access control, connectionless integrity, data origin
authentication, rejection of replayed packets that is a form of partial sequence integrity, and
confidentiality by encryption. These objectives are met through the use of two traffic
security protocols, the Authentication Header (AH) and the Encapsulating Security Payload
(ESP), and through the use of cryptographic key management procedures and protocols.
1. Open VPN and Remote Access >> VPN Profiles.
2. Simply click the Add button.
3. The following dialog will appear. Click the Basic tab to configure the settings.
Available parameters are listed as follows:
Item
Profile
Enable
Basic
Vigor2960 Series User's Guide
Display the name of the remote host of this profile.
Display the WAN IP address with subnet mask of this
profile.
Display other LAN IP addresses with subnet mask which can
be used of this profile.
c r e a t e a n I P s e c V P
c r e a t e a n I P s e c V
Description
Type the name of the profile.
Check this box to enable this profile.
Auto Dial-Out – Click Enable to make Vigor router
performing VPN connection based on the condition selected
(e.g., Always Dial-Out, if.wan1/wan2/usb1/usb2 down).
For Remote Dial-In User- Click Enable to allow the
connection via IPsec remote dial-in host.
Dial-Out Through- Choose a wan profile to be used by such
N p r o f i l e
P N p r o f i l e
321