AirLive WN-300ARM-VPN - Manual (Page 90)

AirLive WN-300ARM-VPN User’s Manual 88
Settings
Setting LAN A Gateway LAN B Gateway Notes
Policy Name Example Example Name does not affect
operation. Select a
meaningful name.
Remote VPN
Endpoint
Fixed IP Address
60.250.158.64
Fixed IP Address
61.229.35.12
Other endpoint's WAN
(Internet) IP address.
NetBIOS Enable Enable Disable if not required.
Local LAN
IP address
Mask
192.168.0.0
255.255.255.0
192.168.1.0
255.255.255.0
Local Address subnet.
Use a more restrictive
definition if possible.
Remote LAN
IP address
Mask
192.168.1.0
255.255.255.0
192.168.0.0
255.255.255.0
Remote Address subnet.
Use a more restrictive
definition if possible.
IKE
Direction Initiator &
responder
Initiator &
responder
Does not have to match.
Either endpoint can block 1
direction.
Exchange mode Main Mode Main Mode Must match
DH Group Group 2 (1024 bit) Group 2 (1024 bit) Must match
Local Identity IP address IP address IP address is the most
common ID method
Remote Identity WAN IP address WAN IP address IP address is the most
common ID method
SA Parameters
Encryption 3DES 3DES Must match.
Authentication MD5 MD5 Must match
Pre-shared Key 123456789 123456789 Must match;
use any string.
SA Life time 28800 28800 Does not have to match.
Shorter period will be used.
PFS Disabled Disabled Must match
Note:
Some VPN Gateways or programs let you specify the following settings separately for IKE and IPSec. For this
device, the same settings are used for both IKE and IPSec.
 Authentication
 Encryption
 SA
Lifetime