Chapter 4: Configuration

77

PPTP Connection - Remote Access

Connection Name:

A user-defined name for the connection (e.g. “connection to office”).

Type:

Check

Dial Out

if you want your router to operate as a client (connecting to a remote VPN

server, e.g. your office server), check

Dial In

operates as a VPN server.

~

When configuring your router as a Client, enter the remote

Server IP

Address

(or Domain

Name)

you wish to connection to.

~

When configuring your router as a server, enter the

Private IP Address Assigned to Dial

in User

address.

Username:

If you are a Dial-Out user (client), enter the username provided by your Host.

If you

are a Dial-In user (server), enter your own username.

Password:

If you are a Dial-Out user (client), enter the password provided by your Host.

If you

are a Dial-In user (server), enter your own password.

PPP Authentication Type:

Default is

Auto

if you want the router to determine the authentication

type to use, or else manually specify CHAP (Challenge Handshake Authentication Protocol) or

PAP (Password Authentication Protocol) if you know which type the server is using (when acting

as a client), or else the authentication type you want clients connecting to you to use (when acting

as a server). When using PAP, the password is sent unencrypted, whilst CHAP encrypts the

password before sending, and also allows for challenges at different periods to ensure that an

intruder has not replaced the client.

Data Encryption:

Data sent over the VPN connection can be encrypted by an MPPE algorithm.

Default is

Auto,

so that this setting is negotiated when establishing a connection, or else you can

manually

Enable

or

Disable

encryption.

Key Length:

The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is

Auto

, it is negotiated when establishing a connection. 128 bit keys provide stronger encryption

than 40 bit keys.

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed every 256 packets

when you select Stateful mode. If you select Stateless mode, the key will be changed in each

packet.

Chapter 4: Configuration

78

Idle Time

: Auto-disconnect the VPN connection when there is no activity on the connection for a

predetermined period of time. 0 means this connection is always on.

Active as default route

: Enables the default route.

Click

Apply

button to apply your changes.

Chapter 4: Configuration

79

PPTP Connection - LAN to LAN

Connection Name:

A user-define description of the connection.

Type:

Check

Dial Out

if you want your router to operate as a client (connecting to a remote VPN

server, e.g. your office server), check

Dial In

operates as a VPN server.

~

When configuring your router as a Client, enter the remote

Server IP

Address

(or

Hostname)

you wish to connection to.

~

When configuring your router as a server, enter the

Private IP Address Assigned to Dial

in User

address.

Peer Network IP:

Enter Peer network IP address.

Netmask:

Enter the subnet mask of peer network based on the Peer Network IP setting.

Username:

If you are a Dial-Out user (client), enter the username provided by your Host.

If you

are a Dial-In user (server), enter your own username.

Password:

If you are a Dial-Out user (client), enter the password provided by the your Host. If you

are a Dial-In user (server), enter your own password.

PPP Authentication Type:

Default is

Auto

if you want the router to determine the authentication

type to use, or else manually specify CHAP (Challenge Handshake Authentication Protocol) or

PAP (Password Authentication Protocol) if you know which type the server is using (when acting

as a client), or else the authentication type you want clients connecting to you to use (when acting

as a server). When using PAP, the password is sent unencrypted, whilst CHAP encrypts the

password before sending, and also allows for challenges at different periods to ensure that the

client has not been replaced by an intruder.

Data Encryption:

Data sent over the VPN connection can be encrypted by an MPPE algorithm.

Default is

Auto,

so that this setting is negotiated when establishing a connection, or else you can

manually

Enable

or

Disable

encryption.

Key Length:

The data can be encrypted by MPPE algorithm with 40 bits or 128 bits. Default is

Auto

, it is negotiated when establishing a connection. 128 bit keys provide stronger encryption

than 40 bit keys.

Chapter 4: Configuration

80

Mode:

You may select

Stateful

or

Stateless

mode. The key will be changed every 256 packets

when you select Stateful mode. If you select Stateless mode, the key will be changed in each

packet.

Idle Time

: Auto-disconnect the VPN connection when there is no activity on the connection for a

predetermined period of time. 0 means this connection is always on.

Click

Apply

button to apply your changes.

Chapter 4: Configuration

81

IPSec (IP Security Protocol)

Click

Create

to create a new IPSec VPN connection account.

After you have created the IPSec connection, account information will be displayed. (See example

above).

~

Enable / Disable:

This function activates or deactivates the IPSec connection.

To wish

interrupting the tunnel, check

Disable

radio button and click

Apply

button to deactivate the

connection.

Name:

This is the user-defined name of the connection.

Local Subnet:

Displays IP address and subnet of the local network.

Remote Subnet:

Displays IP address and subnet of the remote network.

Remote Gateway:

This is the IP address or Domain Name of the remote VPN device that is

connected and established a VPN tunnel.

IPSec Proposal:

This is selected IPSec security method.