Page 166 / 202
Scroll up to view Page 161 - 165
Vigor2800 Series User’s Guide
160
This page is left blank.
Page 167 / 202
Vigor2800 Series User’s Guide
161
4
A
A
p
p
p
p
l
l
i
i
c
c
a
a
t
t
i
i
o
o
n
n
a
a
n
n
d
d
E
E
x
x
a
a
m
m
p
p
l
l
e
e
s
s
4.1 Create a LAN-to-LAN Connection Between Remote Office
and Headquarter
The most common case is that you may want to connect to network securely, such as the
remote branch office and headquarter. According to the network structure as shown in the
below illustration, you may follow the steps to create a LAN-to-LAN profile. These two
networks (LANs) should NOT have the same network address.
Settings in Router A in headquarter:
1.
Go to
VPN and Remote Access
and select
Remote Access Control
to enable the
necessary VPN service and click
OK
.
2.
Then,
For using
PPP
based services, such as PPTP, L2TP, you have to set general settings in
PPP General Setup
.
Page 168 / 202
Vigor2800 Series User’s Guide
162
For using
IPSec
-based service, such as IPSec or L2TP with IPSec Policy, you have to
set general settings in
IPSec General Setup
, such as the pre-shared key that both
parties have known.
3.
Go to
LAN-to-LAN
. Click on one index number to edit a profile.
4.
Set
Common Settings
as shown below. You should enable both of VPN connections
because any one of the parties may start the VPN connection.
5.
Set
Dial-Out Settings
as shown below to dial to connect to Router B aggressively with
the selected Dial-Out method.
If an
IPSec-based
service is selected, you should further specify the remote peer IP
Address, IKE Authentication Method and IPSec Security Method for this Dial-Out
connection.
Page 169 / 202
Vigor2800 Series User’s Guide
163
If a
PPP-based service
is selected, you should further specify the remote peer IP
Address, Username, Password, PPP Authentication and VJ Compression for this
Dial-Out connection.
6.
Set
Dial-In settings
to as shown below to allow Router B dial-in to build VPN
connection.
If an
IPSec-based
service is selected, you may further specify the remote peer IP
Address, IKE Authentication Method and IPSec Security Method for this Dial-In
connection. Otherwise, it will apply the settings defined in
IPSec General Setup
above.
Page 170 / 202
Vigor2800 Series User’s Guide
164
If a
PPP-based service
is selected, you should further specify the remote peer IP
Address, Username, Password, and VJ Compression for this Dial-In connection.
7.
At last, set the remote network IP/subnet in
TCP/IP Network Settings
so that Router
A can direct the packets destined to the remote network to Router B via the VPN
connection.
Settings in Router B in the remote office:
1.
Go to
VPN and Remote Access
and select
Remote Access Control
to enable the
necessary VPN service and click
OK
.
19216811.live