D-Link DFL-600 - Manual (Page 75)

IPSec Pass-through Click Enable to allow IPSec packets to pass
through the router to the destination computer on
your LAN. When IPSec Pass-through is
enabled, the DFL-600 will allow IPSec packets
to reach their destination computer on your
LAN.
IPSec Status Click Enable to make the IPSec settings active.
Manual Key Settings
There are two methods for exchanging the encryption/decryption keys
required by IPSec
− Manual Key entry and Internet Key Exchange (IKE).
The difference between Manual Key and IKE is how the encryption keys and
SPI are determined. For a Manual Key VPN, the encryption key,
authentication key (if required) and SPIs are predetermined by a Network
Administrator when configuring the connection.
The differences between Manual Key and IKE can be summarized as:
• a al Ke on key
(if
adm
• For an IKE VPN, the keys and SPIs are negotiated between VPN
M nu y VPN requires the encryption key, authenticati
required), and SPIs to be predetermined by a network
inistrator when the IPSec connection is configured.
gateways. The two VPN gateways can then use these keys and