TP-Link Omada ER8411 VPN Router - Manual (Page 155)

User Guide 146
Configuring VPN IPSec VPN Configuration
2) Configure the Network Mode. Select LAN-to-LAN when the network is connected to
the other network. Select Client-to-LAN when a host is connected to the network.
When the LAN-to-LAN mode is selected, the following section will appear.
Remote
Gateway
Enter an IP address or a domain name (1 to 255 characters) as the remote
gateway. 0.0.0.0 represents any IP address. Only when the negotiation mode is
set to Responder Mode can you enter 0.0.0.0.
WAN Specify the WAN port on which the IPSec tunnel is established.
Local Subnet Specify the local network. (It’s always the IP address range of LAN on the local
side of the VPN tunnel.) It’s formed from the IP address and subnet mask.
Remote Subnet Specify the remote network. (It’s always the IP address range of LAN on the
remote peer of the VPN tunnel.) It’s formed from the IP address and subnet mask.
Pre-shared Key Specify the unique pre-shared key for both peers’ authentication.
Status Choose to enable the IPSec policy.
Note:
The Local Subnet and Remote Subnet should not be in the same network segment when
choosing LAN-to-LAN as the VPN mode.
When the Client-to-LAN mode is selected, the following section will appear.
Remote Host Enter the IP address of the remote host. 0.0.0.0 represents any IP address.
WAN Specify the WAN port on which the IPSec tunnel is established.
Local Subnet Specify the local network. (This is the IP address range of the LAN on the local
side of the VPN tunnel.) It’s formed from the IP address and subnet mask.
Pre-shared Key Specify the unique pre-shared key for both peers’ authentication.