Virtual Private Networks (VPNs) 5-7
•Enter the Remote IP Address and Remote IP Mask for the host to which you want to tunnel.
About IPsec Tunnels
IPsec stands for IP Security, a set of protocols that supports secure exchange of IP packets at the IP layer.
IPsec is deployed widely to implement Virtual Private Networks (VPNs). See "Overview" on page 5-1 for more
information.
IPsec supports two encryption modes: Transport and Tunnel. Transport mode encr ypts only the data portion
(payload) of each packet, but leaves the header untouched. The more secure Tunnel mode encrypts both the
header and the payload. On the receiving side, an IPsec-compliant device decrypts each packet. Motorola
Netopia® Routers support the more secure Tunnel mode.
Motorola Netopia® Embedded Software Version 8.7.4 offers IPsec 3DES encryption over the VPN tunnel. DES
stands for Data Encryption Standard, a popular symmetric-key encryption method. DES uses a 56-bit key.
Motorola Netopia® Routers offer IPsec 3DES (triple DES) encryption as a standard option. Some models
support built-in hardware acceleration of 3DES encryption at line speeds.
Internet Key Exchange (IKE) is an authentication and encryption key management protocol used in conjunction
with the IPsec standard. IPsec key management offers a wide variety of options which are explained in
Chapter 6, “Internet Key Exchange for VPNs.”
About L2TP Tunnels
L2TP stands for Layer 2 Tunnelling Protocol, an extension to the PPP protocol. L2TP combines features of two
other tunneling protocols: PPTP and L2F. Like PPTP, L2TP is a Datalink Encapsulation option in Connection
Profiles. It is not an option in device or link configuration screens, as L2TP is not a native encapsulation.
Consequently, the Easy Setup Profile does not offer L2TP datalink encapsulation. See the "Creating a New
Connection Profile" on page 2-8 for information on creating Connection Profiles.
IP Profile Parameters
Address Translation Enabled: Yes
NAT Map List... Easy-PAT
NAT Server List... Easy-Servers
Local WAN IP Address: 0.0.0.0
Remote IP Address: 173.167.8.10
Remote IP Mask: 255.255.0.0
Filter Set...
Remove Filter Set
RIP Profile Options...