User manual DRAYTEK VIGOR 2910 V4.0

[. . . ] ii Vigor2910 Series User's Guide Vigor2910 Dual-WAN Security Router User's Guide Version: 4. 0 Firmware Version: V3. 2. 4 Date: 11/05/2010 Copyright 2010 All rights reserved. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. The scope of delivery and other details are subject to change without prior notice. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are trademarks of Microsoft Corp. [. . . ] Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step. LAN-to-LAN Client Mode Choose the client mode. Route Mode/NAT Mode ­ If the remote network only allows Selection you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Vigor2910 Series User's Guide 105 Please choose a LAN-to-LAN Profile There are 32 VPN tunnels for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. After making 106 Vigor2910 Series User's Guide the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: When you choose L2TP, you will see the following graphic: Vigor2910 Series User's Guide 107 When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: When you choose L2TP over IPSec (Must), you will see the following graphic: 108 Vigor2910 Series User's Guide Profile Name Type a name for such profile. The length of the file is limited to 10 characters. VPN Connection Through Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. WAN2 Only - While connecting, the router will use WAN2 as the only channel for VPN connection. Always On Pre-Shared Key Check to enable router always keep VPN connection. IKE Authentication Method usually applies to those are remote dial-in user or node (LAN to LAN) which uses dynamic IP address and IPSec-related VPN connections such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key-Confirm the pre-shared key. Digital Signature (X. 509) Check the box of Digital Signature to invoke this function and select one predefined in the X. 509 Peer ID Vigor2910 Series User's Guide 109 Profiles (set from VPN and Remote Access>>IPSec Peer Identity). IPSec Security Method Medium - Authentication Header (AH) means data will be authenticated, but not be encrypted. High - Encapsulating Security Payload (ESP) means payload (data) will be encrypted and authenticated. You may select encryption algorithm from Data Encryption Standard (DES), Triple DES (3DES), and AES. This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Please type the network mask (according to the real location of the remote host) for building VPN connection. User Name Password Remote Network IP Remote Network Mask After finishing the configuration, please click Next. If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Go to the VPN Connection Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Management Connection status. Do another VPN Server Wizard Setup View more detailed configuration Click this radio button to set another profile of VPN Server through VPN Server Wizard. [. . . ] Go to Control Panel and then double-click on Network Connections. 2. Right-click on Local Area Connection and click on Properties. 3. Select Internet Protocol (TCP/IP) and then click Properties. 252 Vigor2910 Series User's Guide 4. Select Obtain an IP address automatically and Obtain DNS server address automatically. For MacOs 1. On the Network screen, select Using DHCP from the drop down list of Configure IPv4. Vigor2910 Series User's Guide 253 5. 3 Pinging the Router from Your Computer The default gateway IP address of the router is 192. 168. 1. 1. For some reason, you might need to use "ping" command to check the link status of the router. The most important thing is that the computer will receive a reply from 192. 168. 1. 1. [. . . ]