Page 316 / 357
Scroll up to view Page 311 - 315
Vigor2830 Series User’s Guide
304
This page is left blank.
Page 317 / 357
Vigor2830 Series User’s Guide
305
5
A
A
p
p
p
p
l
l
i
i
c
c
a
a
t
t
i
i
o
o
n
n
a
a
n
n
d
d
E
E
x
x
a
a
m
m
p
p
l
l
e
e
s
s
5.1 Create a LAN-to-LAN Connection Between Remote Office
and Headquarter
The most common case is that you may want to connect to network securely, such as the
remote branch office and headquarter. According to the network structure as shown in the
below illustration, you may follow the steps to create a LAN-to-LAN profile. These two
networks (LANs) should NOT have the same network address.
Settings in Router A in headquarter:
1.
Go to
VPN and Remote Access
and select
Remote Access Control
to enable the
necessary VPN service and click
OK
.
2.
Then,
For using
PPP
based services, such as PPTP, L2TP, you have to set general settings in
PPP General Setup
.
For using
IPSec
-based service, such as IPSec or L2TP with IPSec Policy, you have to set
Page 318 / 357
Vigor2830 Series User’s Guide
306
general settings in
IPSec General Setup
, such as the pre-shared key that both parties
have known.
3.
Go to
LAN-to-LAN
. Click on one index number to edit a profile.
4.
Set
Common Settings
as shown below. You should enable both of VPN connections
because any one of the parties may start the VPN connection.
Page 319 / 357
Vigor2830 Series User’s Guide
307
5.
Set
Dial-Out Settings
as shown below to dial to connect to Router B aggressively with
the selected Dial-Out method.
If an
IPSec-based
service is selected, you should further specify the remote peer IP
Address, IKE Authentication Method and IPSec Security Method for this Dial-Out
connection.
If a
PPP-based service
is selected, you should further specify the remote peer IP Address,
Username, Password, PPP Authentication and VJ Compression for this Dial-Out
connection.
Page 320 / 357
Vigor2830 Series User’s Guide
308
6.
Set
Dial-In settings
to as shown below to allow Router B dial-in to build VPN
connection.
If an
IPSec-based
service is selected, you may further specify the remote peer IP
Address, IKE Authentication Method and IPSec Security Method for this Dial-In
connection. Otherwise, it will apply the settings defined in
IPSec General Setup
above.
If a
PPP-based service
is selected, you should further specify the remote peer IP Address,
Username, Password, and VJ Compression for this Dial-In connection.
19216811.live