Draytek Vigor2862 Series User Manual page 427

Item
IPSec Security Method
After finishing all the settings here, please click OK to save the configuration.
Vigor2862 Series User's Guide
Description
Key function and enter a string of up to 63 characters as the
pre-shared key.
Digital Signature (X.509) – Select this checkbox to enable
X.509 Digital Signature and choose a predefined profile that
has been set in VPN and Remote Access >> IPSec Peer
Identity.
When the remote node is specified, all fields in this section are
required for IPsec Tunnels and L2TP connections with IPsec
Policy. Select any combination of Medium, DES, 3DES and AES
security methods as desired.
Medium-Authentication Header (AH) - Data will be
authenticated, but not be encrypted. By default, this option is
enabled. You can uncheck it to disable it.
High-Encapsulating Security Payload (ESP) - Payload (data)
will be encrypted and authenticated. You may select
encryption algorithm from Data Encryption Standard (DES),
Triple DES (3DES), and AES.
Local ID - Specify a local ID to be used for Dial-in setting in the
LAN-to-LAN Profile setup. This item is optional and can be
used only in IKE aggressive mode.
411