Draytek Vigor3900 Series User Manual page 222

If you choose IPSec as the Type in Step 1, you will get the following page:
Available parameters are listed as follows:
Item
Profile
Enable This Profile
Auth Type
Certificate
Preshared Key
Security Protocol
WAN Profile
Local IP / Subnet
Mask
Local Next Hop
Remote Host
Remote IP / Subnet
Mask
Local GRE IP
Description
Display the name of the profile.
Check this box to enable such profile.
The authentication to be used by Pre-Shared Key or RSA
Signature. Choose PSK or RSA for such profile.
Choose a local certificate from the drop down list.
Type a pre-shared key for authentication if PSK is selected
as Auth Type.
Choose ESP to specify the IPSec protocol for the
Encapsulating Security Payload protocol. The data will be
encrypted and authenticated. Choose AH to specify the
IPSec protocol for the Authentication Header protocol. The
data will be authenticated but not be encrypted.
Choose a WAN profile to be used by such profile.
Type the IP address and subnet mask of local host.
Specify the gateway for WAN interface. Usually, use the
default setting (leave it in blank).
Type the WAN IP address for the remote host.
Type the LAN IP address and LAN subnet mask for the
remote host.
The virtual IP address of the router, specified for this tunnel.
214 Vigor3900 Series User's Guide