igor2930 Series User’s Guide
121
Profile Name
Type a name for such profile. The length of the file is
limited to 10 characters.
VPN Dial-Out Through
Use the drop down menu to choose a proper WAN
interface for this profile. This setting is useful for
dial-out only.
WAN1 First / WAN2 First
/ - While connecting, the
router will use WAN1/WAN2 as the first channel for
VPN connection. If WAN1/WAN2 fails, the router will
use another WAN interface instead.
WAN1 Only / WAN2 Only
- While connecting, the
router will use WAN1/WAN2 as the only channel for
VPN connection.
Always On
Check to enable router always keep VPN connection.
Pre-Shared Key
IKE Authentication Method
usually applies to those
are remote dial-in user or node (LAN to LAN) which
uses dynamic IP address and IPSec-related VPN
connections such as L2TP over IPSec and IPSec tunnel.
Pre-Shared Key-
Specify a key for IKE authentication.
Confirm Pre-Shared Key-
Confirm the pre-shared key.
Digital Signature (X.509)
Click
Digital Signature
to invoke this function. Use the
drop down list to choose one of the certificates for
using. You have to configure one certificate at least
previously in
Certificate Management >> Local
Certificate.
Otherwise, the setting you choose here will
not be effective.
Peer ID
– Choose the one you want.
Local ID
– Choose
Alternative Subject Name First
or
Subject Name First
.
Local Certificate –
Choose one of the local certificates
defined in
Certificate Management >> Local
Certificate
.
IPSec Security Method
Medium
-
Authentication Header (AH) means data will
be authenticated, but not be encrypted. By default, this
option is active.
High
-
Encapsulating Security Payload (ESP) means
payload (data) will be encrypted and authenticated. You
may select encryption algorithm from Data Encryption
Standard (DES), Triple DES (3DES), and AES.
User Name
This field is used to authenticate for connection when
you select PPTP or L2TP with or without IPSec policy
above.
Password
This field is used to authenticate for connection when
you select PPTP or L2TP with or without IPSec policy
above.
Remote Network IP
Please type one LAN IP address (according to the real
location of the remote host) for building VPN