Edimax ER-1088 Available from Edimax USA Manual - Page 61

Settings - IPSec Policy Setup

Page 61 highlights

Settings - IPSec Policy Setup IPSec Traffic Binding Traffic Selector Security Level • Tunnel Name - In order to distinguish the tunnel, you have to give "Tunnel" a name. • Tunnel - If set to Enable, this will allow the tunnel to connect. • WAN port - You can choose any WAN port to make the VPN connection. • PPPoE Session - If you are using a multi-session PPPoE connection, you can select which PPPoE session will create a VPN tunnel between two sites. • Local Identity Type - You can select how the router will identify itself to the destination VPN site. There are three options to select from: • WAN IP address - This allows the authentication by using its public IP address. • Domain Name - This allows the authentication by using a domain name. • Distinguished Name - This allows the authentication by using a distinguished name such as an email address or alphanumeric characters. • Service - Protocol Type: You can choose TCP, UDP, ICMP or GRE protocol as your connection protocol. By default the protocol type is "Any". • Local Security Network - These entries identify the private network on this VPN gateway - the hosts of which can use the LAN-to-LAN connection. You can choose a single IP address, the subnet, or a selected IP range to make VPN LAN-to-LAN connection. • Remote Security Network - These entries identify the private network on the remote peer VPN gateway whose hosts can use the LAN-to-LAN connection. You can choose a single IP address, the subnet, or a selected IP range to make VPN connection • Remote Security Gateway - You can select either the remote side by a domain name, a remote side IP address (WAN IP address) or a distinguished name as your remote side security gateway. • Encryption Method - Specifies the encryption mechanism to use. Data encryption makes the data unreadable if intercepted. There are three encryption methods available: DES, 3DES and AES. The default setting is null. • Authentication Method - Specifies the packets authentication mechanism to use. Packets authentication confirms if the data's source is correct or not. There are three authentication methods available - MD5, SHA1 and SHA2. • ESP Mode - Only Tunnel Mode is available. It offers the most protection against an intruder trying to intercept VPN packets. Page 57

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97

Settings – IPSec Policy Setup
IPSec Traffic Binding
Tunnel Name
– In order to distinguish the tunnel, you have to give
“Tunnel” a name.
Tunnel
– If set to
Enable
, this will allow the tunnel to connect.
WAN port
– You can choose any WAN port to make the VPN
connection.
PPPoE Session
– If you are using a multi-session PPPoE
connection, you can select which PPPoE session will create a
VPN tunnel between two sites.
Local Identity Type
– You can select how the router will identify
itself to the destination VPN site. There are three options to select
from:
WAN IP address
– This allows the authentication by using its
public IP address.
Domain Name
– This allows the authentication by using a
domain name.
Distinguished Name
– This allows the authentication by using
a distinguished name such as an email address or alpha-
numeric characters.
Traffic Selector
Service
Protocol Type:
You can choose TCP, UDP, ICMP or
GRE protocol as your connection protocol. By default the protocol
type is “Any”.
Local Security Network
– These entries identify the private
network on this VPN gateway - the hosts of which can use the
LAN-to-LAN connection. You can choose a single IP address, the
subnet, or a selected IP range to make VPN LAN-to-LAN
connection.
Remote Security Network
– These entries identify the private
network on the remote peer VPN gateway whose hosts can use
the LAN-to-LAN connection. You can choose a single IP address,
the subnet, or a selected IP range to make VPN connection
Remote Security Gateway
– You can select either the remote
side by a domain name, a remote side IP address (WAN IP
address) or a distinguished name as your remote side security
gateway.
Security Level
Encryption Method
– Specifies the encryption mechanism to use.
Data encryption makes the data unreadable if intercepted. There
are three encryption methods available: DES, 3DES and AES. The
default setting is
null
.
Authentication Method
– Specifies the packets authentication
mechanism to use. Packets authentication confirms if the data’s
source is correct or not. There are three authentication methods
available - MD5, SHA1 and SHA2.
ESP Mode
– Only
Tunnel Mode
is available. It offers the most
protection against an intruder trying to intercept VPN packets.
Page 57