Draytek Vigor2950 Series User Manual page 133

User Name
Password
VJ Compression
IKE Authentication
Method
IPSec Security Method
Callback Function (CPCB) The callback function provides a callback service only for the
Vigor2950 Series User's Guide
None - Do not apply the IPSec policy. Accordingly, the VPN
connection employed the L2TP without IPSec policy can be
viewed as one pure L2TP connection.
Nice to Have- Apply the IPSec policy first, if it is applicable
during negotiation. Otherwise, the dial-in VPN connection
becomes one pure L2TP connection.
Must- Specify the IPSec policy to be definitely applied on the
L2TP connection.
Specify CLID or Remote VPN Gateway - You can specify
the IP address of the remote dial-in user or peer ID (should be
the same with the ID setting in dial-in type) by checking the
box. Enter Peer ISDN number if you select ISDN above (This
feature is useful for i model only.). Also, you should further
specify the corresponding security methods on the right side.
If you uncheck the checkbox, the connection type you select
above will apply the authentication methods and security
methods in the general settings.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above.
This field is applicable when you select ISDN, PPTP or L2TP
with or without IPSec policy above.
VJ Compression is used for TCP/IP protocol header
compression. This field is applicable when you select ISDN,
PPTP or L2TP with or without IPSec policy above.
This group of fields is applicable for IPSec Tunnels and L2TP
with IPSec Policy.
Pre-Shared Key-Input 1-63 characters as pre-shared key.
Digital Signature (X.509) – This setting will be available
when IPSec Tunnel is selected. Click this radio button to
invoke this function and select one predefined profile in the
Peer ID (set from VPN and Remote Access>>IPSec Peer
Identity).
Peer ID – Display the IPSec Peer Identity profiles. Use the
drop down menu to choose any one desired.
Local ID – There are two selections offered here. Choose
Alternative Subject Name First or choose Subject Name
First based on the local certificate selected below.
This group of fields is a must for IPSec Tunnels and L2TP
with IPSec Policy when you specify the remote node.
Medium- Authentication Header (AH) means data will be
authenticated, but not be encrypted. By default, this option is
active.
High- Encapsulating Security Payload (ESP) means payload
(data) will be encrypted and authenticated. You may select
encryption algorithm from Data Encryption Standard (DES),
Triple DES (3DES), and AES.
ISDN LAN-to-LAN connection (this feature is useful for i
model only). The remote user will be charged the connection
fee by the telecom.
Enable Callback function-Enables the callback function.
123