Edimax Technology ER-1088 - Manual (Page 61)

Settings – IPSec Policy Setup
IPSec Traffic Binding • Tunnel Name – In order to distinguish the tunnel, you have to give
“Tunnel” a name.
• Tunnel – If set to Enable, this will allow the tunnel to connect.
• WAN port – You can choose any WAN port to make the VPN
connection.
• PPPoE Session – If you are using a multi-session PPPoE
connection, you can select which PPPoE session will create a
VPN tunnel between two sites.
• Local Identity Type – You can select how the router will identify
itself to the destination VPN site. There are three options to select
from:
• WAN IP address – This allows the authentication by using its
public IP address.
• Domain Name – This allows the authentication by using a
domain name.
• Distinguished Name – This allows the authentication by using
a distinguished name such as an email address or alpha-
numeric characters.
Traffic Selector • Service – Protocol Type: You can choose TCP, UDP, ICMP or
GRE protocol as your connection protocol. By default the protocol
type is “Any”.
• Local Security Network – These entries identify the private
network on this VPN gateway - the hosts of which can use the
LAN-to-LAN connection. You can choose a single IP address, the
subnet, or a selected IP range to make VPN LAN-to-LAN
connection.
• Remote Security Network – These entries identify the private
network on the remote peer VPN gateway whose hosts can use
the LAN-to-LAN connection. You can choose a single IP address,
the subnet, or a selected IP range to make VPN connection
• Remote Security Gateway – You can select either the remote
side by a domain name, a remote side IP address (WAN IP
address) or a distinguished name as your remote side security
gateway.
Security Level • Encryption Method – Specifies the encryption mechanism to use.
Data encryption makes the data unreadable if intercepted. There
are three encryption methods available: DES, 3DES and AES. The
default setting is null.
• Authentication Method – Specifies the packets authentication
mechanism to use. Packets authentication confirms if the data’s
source is correct or not. There are three authentication methods
available - MD5, SHA1 and SHA2.
• ESP Mode – Only Tunnel Mode is available. It offers the most
protection against an intruder trying to intercept VPN packets.
Page 57