ZyXEL Communications Prestige 794M - Manual (Page 89)

Prestige 794M User’s Guide
89 Chapter 7 VPN
The following table describes the labels in this screen.
Table 46 VPN: L2TP: Create: Remote Access Connection
LABEL DESCRIPTION
Connection Name Enter a descriptive name for identification purposes.
Type Select Dial Out to set the Prestige to act as a client (connecting to a remote
VPN server).
Select Dial In to set the Prestige to act as a VPN server.
Server IP Address (or
Domain Name)
This field is applicable when you select Dial Out in the Type field
Enter the IP address or the domain name of the remote VPN device.
Private IP Address
Assigned to Dial in
User
This field is applicable when you select Dial In in the Type field.
Enter the IP address (in dotted decimal notation) to assign to the remote VPN
client that initiates the VPN connection. For example, 192.168.1.10.
Username If you select Dial Out in the Type field, enter the username provided.
If you select Dial In in the Type field, enter a username to be used when
establishing a VPN connection.
Password Enter the password associated with the username above.
Authentication Type Specify the authentication type to use when accepting or establishing a VPN
connection. Choices are PAP (Password Authentication Protocol) and CHAP
(Challenge Handshake Authentication Protocol). The default is CHAP.
When you select PAP, password is sent unencrypted. While CHAP provides
better security by encrypting the password before transmission and
reauthenticates the VPN client to protect against identity theft.
Idle Time Specify the time interval in minutes (where there is no traffic between the
Prestige and the computer) that can elapse before the Prestige automatically
disconnects the connection.
Enter 0 to allow connection up all the time.
Active as default route Select this option to set this VPN connection as a default route.
IPSec Select this option to enable IPSec security for your LT2P VPN connection.
Authentication Specify the method to authenticate data packet in this field. Choices are
None, MD5 and SHA1.
Select None to disable authentication.
Select MD5 (Message Digest 5) for minimal security and SHA1 (Secure Hash
Algorithm) for maximum security.
Encryption Specify the method to encrypt data packet in this field. Choices are NULL,
DES, 3DES, AES128, AES 192 and AES 256.
When DES is used for data communications, both sender and receiver must
know the same secret key, which can be used to encrypt and decrypt the
message or to generate and verify a message authentication code. The DES
encryption algorithm uses a 56-bit key.
Triple DES (3DES) is a variation on DES that uses a 168-bit key. As a result,
3DES is more secure than DES. It also requires more processing power,
resulting in increased latency and decreased throughput.
For this implementation, select AES 128, AES 192 or AES 256 that uses
different encryption key lengths. AES is faster than 3DES.
elect NULL to set up a tunnel without encryption. When you select NULL, you
do not enter an encryption key.