igor2930 Series User’s Guide 
121
Profile Name 
Type a name for such profile. The length of the file is 
limited to 10 characters.
VPN Dial-Out Through 
Use the drop down menu to choose a proper WAN 
interface for this profile. This setting is useful for 
dial-out only.
WAN1 First / WAN2 First
/ - While connecting, the 
router will use WAN1/WAN2 as the first channel for 
VPN connection. If WAN1/WAN2 fails, the router will 
use another WAN interface instead. 
WAN1 Only / WAN2 Only 
- While connecting, the 
router will use WAN1/WAN2 as the only channel for 
VPN connection. 
Always On 
Check to enable router always keep VPN connection.
Pre-Shared Key 
IKE Authentication Method
usually applies to those 
are remote dial-in user or node (LAN to LAN) which 
uses dynamic IP address and IPSec-related VPN 
connections such as L2TP over IPSec and IPSec tunnel. 
Pre-Shared Key-
Specify a key for IKE authentication. 
Confirm Pre-Shared Key-
Confirm the pre-shared key. 
Digital Signature (X.509) 
Click 
Digital Signature
to invoke this function. Use the 
drop down list to choose one of the certificates for 
using. You have to configure one certificate at least 
previously in 
Certificate Management >> Local 
Certificate. 
Otherwise, the setting you choose here will 
not be effective. 
Peer ID
– Choose the one you want. 
Local ID
– Choose 
Alternative Subject Name First 
or 
Subject Name First
. 
Local Certificate – 
Choose one of the local certificates 
defined in 
Certificate Management >> Local 
Certificate
.
IPSec Security Method 
Medium
- 
Authentication Header (AH) means data will 
be authenticated, but not be encrypted. By default, this 
option is active. 
High
- 
Encapsulating Security Payload (ESP) means 
payload (data) will be encrypted and authenticated. You 
may select encryption algorithm from Data Encryption 
Standard (DES), Triple DES (3DES), and AES. 
User Name 
This field is used to authenticate for connection when 
you select PPTP or L2TP with or without IPSec policy 
above.
Password 
This field is used to authenticate for connection when 
you select PPTP or L2TP with or without IPSec policy 
above.
Remote Network IP 
Please type one LAN IP address (according to the real 
location of the remote host) for building VPN