Vigor2860 Series User’s Guide

57

2.

When you finish the mode and profile selection, please click

Next

to open the following

page.

In this page, you have to select suitable VPN type for the VPN client profile. There are

six types provided here. Different type will lead to different configuration page. After

making the choices for the client profile, please click

Next

. You will see different

configurations based on the selection(s) you made.

Vigor2860 Series User’s Guide

58

Note:

The following descriptions for VPN Type are based on the

Route Mode

specified in

LAN-to-LAN Client Mode Selection.



When you choose

PPTP (None Encryption)

or

PPTP (Encryption)

, you will see the

following graphic:



When you choose

IPsec

, you will see the following graphic:



When you choose

L2TP

, you will see the following graphic:

Vigor2860 Series User’s Guide

59



When you choose

L2TP over IPsec (Nice to Have)

or

L2TP over IPsec (Must),

you

will see the following graphic:

Available settings are explained as follows:

Item

Description

Profile Name

Type a name for such profile. The length of the file is

limited to 10 characters.

Vigor2860 Series User’s Guide

60

VPN Dial-Out

Through

Use the drop down menu to choose a proper WAN interface

for this profile. This setting is useful for dial-out only.

WAN1 First/ WAN2 First /WAN3 First/WAN4 First

-

While connecting, the router will use

WAN1/WAN2/WAN3/WAN4 as the first channel for VPN

connection. If WAN1/WAN2/WAN3/WAN4 fails, the

router will use another WAN interface instead.

WAN1 Only /WAN2 Only/WAN3 Only/WAN4 Only

-

While connecting, the router will use

WAN1/WAN2/WAN3 as the only channel for VPN

connection.

WAN1 Only: Only establish VPN if WAN2

down

- If

WAN2 failed, the router will use WAN1 for VPN

connection.

WAN2 Only: Only establish VPN if WAN1

down

- If

WAN1 failed, the router will use WAN2 for VPN

connection.

Always On

Check to enable router always keep VPN connection.

Server IP/Host Name

for VPN

Type the IP address of the server or type the host name for

such VPN profile.

IKE Authentication

Method

IKE Authentication Method usually applies to those are

remote dial-in user or node (LAN to LAN) which uses

dynamic IP address and IPsec-related VPN connections

such as L2TP over IPsec and IPsec tunnel.

Pre-Shared Key-

Specify a key for IKE authentication.

Confirm Pre-Shared Key-

Confirm the pre-shared key.

Digital Signature

(X.509)

Click

Digital Signature

to invoke this function.

Peer ID

– Choose the peer ID selection from the drop down

list.

Local ID

– Choose

Alternative Subject Name First

or

Subject Name First

.

Local Certificate

– Use the drop down list to choose one of

the certificates for using. You have to configure one

certificate at least previously in

Certificate Management

>> Local Certificate.

Otherwise, the setting you choose

here will not be effective.

IPsec Security

Method

Medium

-

Authentication Header (AH) means data will be

authenticated, but not be encrypted. By default, this option

Vigor2860 Series User’s Guide

61

is active.

High

-

Encapsulating Security Payload (ESP) means

payload (data) will be encrypted and authenticated. You

may select encryption algorithm from Data Encryption

Standard (DES), Triple DES (3DES), and AES.

User Name

This field is used to authenticate for connection when you

select PPTP or L2TP with or without IPsec policy above.

The length of the user name is limited to 11 characters.

Password

This field is used to authenticate for connection when you

select PPTP or L2TP with or without IPsec policy above.

The length of the password is limited to 11 characters.

Remote Network IP

Please type one LAN IP address (according to the real

location of the remote host) for building VPN connection.

Remote Network

Mask

Please type the network mask (according to the real location

of the remote host) for building VPN connection.

3.

After finishing the configuration, please click

Next.

The confirmation page will be shown

as follows. If there is no problem, you can click one of the radio buttons listed on the page

and click

Finish

to execute the next action.

Available settings are explained as follows:

Item

Description

Go to the VPN

Connection

Management

Click this radio button to access

VPN and Remote

Access>>Connection Management

for viewing VPN

Connection status.

Do another VPN

Server Wizard Setup

Click this radio button to set another profile of VPN Server

through VPN Server Wizard.

View more detailed

configuration

Click this radio button to access

VPN and Remote

Access>>LAN to LAN

for viewing detailed configuration.