Asus SL1000 - Manual (Page 110)

Chapter 10. Configuring VPN Internet Security Router User ’s Manual
94
5. Click on “Enable” or “Disable” radio button to enable or disable this rule.
6. Make changes to any or all of the following fields: local/remote secure group, remote gateway,
key management type (select Manual Key), pre-shared key for IKE, encryption/authentication
algorithm for IKE, lifetime for IKE, encryption/authentication algorithm for IPSec, operation mode
for IPSec, PFS group for IPSec and lifetime for IPSec. Please see Table 10.4 for explanation of
these fields.
7. Assign a priority for this rule by selecting a number from the “Move to” drop-down list. Note that
the number indicates the priority of the rule with two being the highest as one is used by the rule,
allow-ike-io, which is needed by IKE. Higher priority rules will be examined prior to the lower
priority rules by the VPN.
8. Click on the button to create the new VPN rule. The new VPN rule will then be displayed
in the VPN Connection Status table at the bottom half of the VPN Configuration page.
10.4.2 Modify VPN Rules
To modify a VPN rule, follow the instructions below:
1. Log into Configuration Manager as admin, click the VPN menu, and then click the VPN Tunnel
submenu.
2. Prior to modifying a VPN rule, make sure that the VPN service is enabled in System Service
Configuration page.
3. Select the rule number from the “ID” drop-down list or click on the icon of the rule to be
modified in the VPN Connection Status table.
4. Click on “Enable” or “Disable” radio button to enable or disable this rule.
5. Make changes to any or all of the following fields: local/remote secure group, remote gateway,
key management type (select Preshared Key), pre-shared key for IKE, encryption/authentication
algorithm for IKE, lifetime for IKE, encryption/authentication algorithm for IPSec, operation mode
for IPSec, PFS group for IPSec and lifetime for IPSec. Please see Table 10.4 for explanation of
these fields.
6. Click on the button to modify this VPN rule. The new settings for this VPN rule will then
be displayed in the VPN Connection Status table at the bottom half of the VPN Tunnel
Configuration page.
10.4.3 Delete VPN Rules
To delete an outbound ACL rule, follow the instructions below:
1. Log into Configuration Manager as admin, click the VPN menu, and then click the VPN Tunnel
submenu.
2. Prior to deleting a VPN rule, make sure that the VPN service is enabled in System Service
Configuration page.
3. Select the rule number from the “ID” drop-down list or click on the icon of the rule to be
modified in the VPN Connection Status table.
4. Click on the button to delete this VPN rule. Note that the VPN rule deleted will be
removed from the VPN Connection Status table located at the bottom half of the same
configuration page.
10.4.4 Display VPN Rules
To see existing VPN rules, follow the instructions below: