Siemens SINAUT MD740-1 User Manual page 40

Configuration
40 von 105
Connection type
There are four options:
• Tunnel (network $ # network)
• Transport (host $ # host)
• Transport (L2TP Microsoft Windows)
• Transport (L2TP SSH Sentinel)
Tunnel (network $ $ $ $ # # # # network)
This connection type is suitable in every case and it is also
the safest. In this mode the IP datagrams to be transferred
are completely encrypted and sent with a new header to the
remote site's VPN gateway, the "end of the tunnel". There
the transferred datagrams are decrypted and the original
datagrams retrieved from them. These can then be sent to
the destination computer.
Transport (host $ $ $ $ # # # # host)
With this connection type only the data in the IP packets are
encrypted. The IP header information is not encrypted.
Transport (L2TP Microsoft Windows)
If this connection is enabled on the remote computer, you
should also set the SINAUT MD740-1 to Transport (L2TP
Microsoft Windows). The SINAUT MD740-1 will then work
accordingly. The L2TP/PPP protocol creates a tunnel within
the IPsec Transport connection. The locally connected L2TP
computer is assigned its IP address dynamically by the
SINAUT MD740-1.
If you select the connection type Transport (L2TP Microsoft
Windows), set Perfect Forward Secrecy (PFS) to No (see
below). Also enable the L2TP server.
!
As soon as the IPsec/L2TP connection is started under
Windows, a dialogue box appears, asking for the user
name and login. You can enter anything here because
authentication has already taken place via the X.509
certificates, so that the SINAUT MD740-1 ignores these
entries.
SINAUT MD740-1