select above will apply the authentication methods and

 

security methods in the general settings.

User Name

This field is applicable when you select ISDN, PPTP or L2TP

 

with or without IPSec policy above.

Password

This field is applicable when you select ISDN, PPTP or L2TP

 

with or without IPSec policy above.

IKE Authentication Method This group of fields is applicable for IPSec Tunnels and L2TP with IPSec Policy when you specify the IP address of the remote node. The only exception is Digital Signature (X.509) can be set when you select IPSec tunnel either with or without specify the IP address of the remote node.

Pre-Shared Key - Check the box of Pre-Shared Key to invoke this function and type in the required characters (1-63) as the pre-shared key.

Digital Signature (X.509) – Check the box of Digital Signature to invoke this function and Select one predefined Profiles set in the VPN and Remote Access >>IPSec Peer

Identity.

IPSec Security Method

This group of fields is a must for IPSec Tunnels and L2TP

 

with IPSec Policy when you specify the remote node. Check

 

the Medium, DES, 3DES or AES box as the security method.

 

Medium -Authentication Header (AH) means data will be

 

authenticated, but not be encrypted. By default, this option is

 

invoked. You can uncheck it to disable it.

 

High-Encapsulating Security Payload (ESP) means payload

 

(data) will be encrypted and authenticated. You may select

 

encryption algorithm from Data Encryption Standard (DES),

 

Triple DES (3DES), and AES.

 

Local ID - Specify a local ID to be used for Dial-in setting in

 

the LAN-to-LAN Profile setup. This item is optional and can

 

be used only in IKE aggressive mode.

Callback Function

The callback function provides a callback service only for the

 

ISDN dial-in user (for i model only). The remote user will be

 

charged the connection fee by the telecom.

 

Check to enable Callback function-Enables the callback

 

function.

 

Specify the callback number-The option is for extra security.

 

Once enabled, the router will ONLY call back to the specified

 

Callback Number.

 

Check to enable callback budget control-By default, the

 

callback function has a time restriction. Once the callback

 

budget has been exhausted, the callback mechanism will be

 

disabled automatically.

 

Callback Budget (Unit: minutes)- Specify the time budget

 

for the dial-in user. The budget will be decreased

 

automatically per callback connection.

110

VigorPro5500 Series User’s Guide

Page 118
Image 118
Draytek 5500 Series manual User Name, Identity IPSec Security Method, Medium -Authentication Header AH means data will be