1. Home
    2. /
  2. Manuals
    3. /
  3. Billion
    4. /
  4. BiPAC-7404VGO
    5. /
  5. 20
Page 96 / 155 Scroll up to view Page 91 - 95
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
95
L2TP Connection - Remote Access
L2TP VPN Connection
Connection Name:
User-defined name for the connection (e.g. “connection to office”).
Type:
Check
Dial Out
if you want your router to operate as a client (connecting to a remote VPN server,
e.g. your office server), check
Dial In
operates as a VPN server.
~
When configuring your router as a Client, enter the remote
Server IP
Address
(or Hostname)
you wish to connection to.
~
When configuring your router as a server, enter the
Private IP Address Assigned to Dial in
User
address.
Username:
If you are a Dial-Out user (client), enter the username provided by your Host.
If you are a
Dial-In user (server), enter your own username.
Password:
If you are a Dial-Out user (client), enter the password provided by your Host.
If you are a
Dial-In user (server), enter your own password.
PPP Authentication Type:
Default is
Auto
if you want the router to determine the authentication type to
use, or else manually specify CHAP (Challenge Handshake Authentication Protocol) or PAP (Password
Authentication Protocol) if you know which type the server is using (when acting as a client), or else the
authentication type you want clients connecting to you to use (when acting as a server). When using PAP,
the password is sent unencrypted, whilst CHAP encrypts the password before sending, and also allows
for challenges at different periods to ensure that the client has not been replaced by an intruder.
Idle Time
: Auto-disconnect the VPN connection when there is no activity on the connection for a
pre-determined period of time. 0 means this connection is always on.
Active as default route
: Commonly used by the
Dial-out
connection which all packets will route through
Page 97 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
96
the VPN tunnel to the Internet; therefore, active the function may degrade the Internet performance.
Click
Apply
after changing settings.
L2TP over IPSec (L2TP/IPSec) VPN Connection
IPSec:
Enable for enhancing your L2TP VPN security.
Authentication:
Authentication establishes the integrity of the datagram and ensures it is not tampered
with in transmit. There are three options, Message Digest 5 (
MD5
), Secure Hash Algorithm (
SHA1
) or
NONE
. SHA1 is more resistant to brute-force attacks than MD5, however it is slower.
~
MD5:
A one-way hashing algorithm that produces a 128
−
bit hash.
~
SHA1:
A one-way hashing algorithm that produces a 160
−
bit hash.
Encryption:
Select the encryption method from the pull-down menu. There are four options,
DES
,
3DES
,
AES
and
NONE
. NONE means it is a tunnel only with no encryption. 3DES and AES are more powerful
but increase latency.
~
DES:
Stands for Data Encryption Standard, it uses 56 bits as an encryption method.
~
3DES:
Stands for Triple Data Encryption Standard, it uses 168 (56*3) bits as an encryption
method.
~
AES:
Stands for Advanced Encryption Standards, it uses 128 bits as an encryption method.
Perfect Forward Secrecy:
Choose whether to enable PFS using Diffie-Hellman public-key cryptography
to change encryption keys during the second phase of VPN negotiation. This function will provide better
security, but extends the VPN negotiation time. Diffie-Hellman is a public-key cryptography protocol that
allows two parties to establish a shared secret over an unsecured communication channel (i.e. over the
Internet). There are three modes, MODP 768-bit, MODP 1024-bit and MODP 1536-bit. MODP stands for
Modular Exponentiation Groups.
Pre-shared Key:
This is for the Internet Key Exchange (IKE) protocol, a string from 4 to 128 characters.
Both sides should use the same key. IKE is used to establish a shared security policy and authenticated
keys for services (such as IPSec) that require a key. Before any IPSec traffic can be passed, each router
must be able to verify the identity of its peer. This can be done by manually entering the pre-shared key
into both sides (router or hosts).
Remote Host Name (Optional):
Enter hostname of remote VPN device. It is a tunnel identifier from the
Remote VPN device matches with the Remote hostname provided.
If remote hostname matches, tunnel
will be connected; otherwise, it will be dropped.
Cautious:
This is only when the router performs as a VPN server.
This option should be used by
advanced users only.
Local Host Name (Optional):
Enter hostname of Local VPN device that is connected / establishes a
VPN tunnel.
As default, Router’s default Hostname is
home.gateway.
Tunnel Authentication:
This enables router to authenticate both the L2TP remote and L2TP host.
This
is only valid when L2TP remote supports this feature.
Secret:
The secure password length should be 16 characters which may include numbers and
characters.
Click
Apply
after changing settings.
Page 98 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
97
Example: Configuring a L2TP VPN - Remote Access Dial-in Connection
A remote worker establishes a L2TP VPN connection with the head office using Microsoft's VPN Adapter
(included with Windows XP/2000/ME, etc.). The router is installed in the head office, connected to a
couple of PCs and Servers.
Dial-in
Page 99 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
98
Configuring L2TP VPN in the Office
The input IP address 192.168.1.200 will be assigned to the remote worker. Please make sure this IP is
not used in the Office LAN.
Item
Function
Description
1
Connection Name
VPN_L2TP
Given a name of L2TP connection
Dial in
Check Dial in
2
Private IP Address
Assigned to Dialing
User
192.168.1.200
An assigned IP address for the remote worker
Username
username
3
Password
123456
Input username & password to authenticate
remote worker
4
Auth.Type
Chap(Auto)
Keep as default value in most of the cases.
5
Idle Timeout
0
The connection will be disconnected when there
Is no traffic in a predefined period of time.
Idle
time 0 means the connection is always on.
IPSec
Enable for enhancing your L2TP VPN security.
Authentication
MD5
Encryption
3DES
Perfect Forward
Secrecy
None
6
Pre-shared Key
12345678
Both sites should use the same value.
1
4
3
2
5
6
Page 100 / 155
VoIP/(802.11g) ADSL2+ (VPN) Firewall Router
Chapter 4: Configuration
99
Example: Configuring a Remote Access L2TP VPN Dial-out Connection
A company’s office establishes a L2TP VPN connection with a file server located at a separate location.
The router is installed in the office, connected to a couple of PCs and Servers.
Dial-out

Rate

4 / 5 based on 1 vote.

Popular Billion Models

Famous Router IPs
Famous Router Companies
Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top