Authentication

Type - Determine the authentication method for remote dial-in

 

user.

Preshared secret If you choose this one, you have to type the shared secret manually and specify local identity. When using Preshared secret, all clients share the same secret.

Certificates - If you choose this one, you have to choose local certificate from the Local Certificate drop down list and type in local identity. Then, use Add Identity to specify remote identity for this service.

Identities

 

Local Certificate - Used to authenticate the local part of the

 

VPN tunnel (while using certificate-based authentication).

 

Local Identity - Specify a local ID to be used for Dial-in

 

setting in the LAN-to-LAN Profile setup. This item is optional

 

and can be used only in IKE aggressive mode. It can also be a

 

DNS name or an email address.

 

Remote Identities - Define the identities of allowed clients.

Advanced Settings

Phase 1 (IKE) Encryption - Negotiation of IKE parameters

 

including encryption, hash, Diffie-Hellman parameter values,

 

and lifetime to protect the following IKE exchange,

 

authentication of both peers using either a Pre-Shared Key or

 

Digital Signature (x.509). The peer that starts the negotiation

 

proposes all its policies to the remote peer and then remote peer

 

tries to find a highest-priority match with its policies.

Phase 2 (IPSec) Encryption - Negotiation IPSec security methods including Authentication Header (AH) or Encapsulating Security Payload (ESP) for the following IKE exchange and mutual examination of the secure tunnel

Vigor2130 Series User’s Guide

157

Page 165
Image 165
Draytek 2130 manual Authentication, Identities, Advanced Settings

2130 specifications

The DrayTek Vigor 2130 is a versatile and powerful router known for its robust features and performance, making it ideal for small to medium-sized businesses and home offices. This dual WAN router stands out due to its reliability and extensive management capabilities, which cater to users seeking both performance and flexibility.

One of the hallmark features of the Vigor 2130 is its dual WAN support, allowing for load balancing and automatic failover. This means that users can connect two internet sources, such as DSL and fiber, to ensure continuous internet availability and enhance overall bandwidth. The router can intelligently distribute traffic across both connections or switch to a backup line seamlessly if one connection fails, ensuring uninterrupted online activities.

Additionally, the DrayTek Vigor 2130 incorporates advanced security features that are essential for protecting sensitive data in a business environment. It comes equipped with a stateful packet inspection firewall, intrusion detection and prevention systems, and Virtual Private Network (VPN) support, allowing secure remote access for employees and clients. The router supports multiple VPN protocols, including PPTP, L2TP, and IPSec, which enhances connectivity for users working from various locations.

The router also features Quality of Service (QoS) functionalities, enabling users to prioritize bandwidth for critical applications and services. This ensures that essential tasks like VoIP calls or video conferencing run smoothly without interruptions. The Vigor 2130 supports VLANs, allowing businesses to segment their networks for better resource management and security.

On the connectivity front, the Vigor 2130 offers multiple Ethernet ports, including gigabit LAN and WAN ports, providing ample opportunities for wired connections. For wireless needs, the router includes built-in wireless capabilities that support IEEE 802.11n, providing robust Wi-Fi coverage and decent speeds.

With a user-friendly interface and comprehensive logging features, network management becomes intuitive. The Vigor 2130 also supports remote management, enabling IT administrators to configure settings and monitor the network from anywhere, which is particularly useful for businesses with limited on-site IT staff.

In conclusion, the DrayTek Vigor 2130 is a reliable solution that combines performance, security, and ease of management. Its dual WAN capability, robust security features, and advanced management options train organizations to navigate the complexities of modern networking effortlessly. Whether for home use or a small business environment, the Vigor 2130 delivers a comprehensive set of features that meets the needs of modern users.