Draytek 2950 User Guide

 

Vigor2950 Series User’s Guide 

96 

This field is applicable when you select ISDN, PPTP or L2TP 
with or without IPSec policy above.   

This field is applicable when you select ISDN, PPTP or L2TP 
with or without IPSec policy above. PAP/CHAP is the most 
common selection due to wild compatibility. 

This field is applicable when you select ISDN, PPTP or L2TP 
with or without IPSec policy above. VJ Compression is used 
for TCP/IP protocol header compression. Normally set to Yes 
to improve bandwidth utilization. 

IKE Authentication 
Method 

This group of fields is applicable for IPSec Tunnels and 
L2TP with IPSec Policy. 
Pre-Shared Key-Input 1-63 characters as pre-shared key. 
Digital Signature (X.509) – Click this radio button to 
invoke this function and select one predefined in the X.509 
Peer ID Profiles (set from VPN and Remote 
Access>>IPSec Peer Identity). 

This group of fields is a must for IPSec Tunnels and L2TP 
with IPSec Policy. 

Authentication Header (AH) means data will be 
authenticated, but not be encrypted. By default, this option is 
active. 

High (ESP-Encapsulating Security Payload)- means 
payload (data) will be encrypted and authenticated. Select 
from below: 
DES without Authentication -Use DES encryption algorithm 
and not apply any authentication scheme.   
DES with Authentication-Use DES encryption algorithm and 
apply MD5 or SHA-1 authentication algorithm. 
3DES without Authentication-Use triple DES encryption 
algorithm and not apply any authentication scheme. 
3DES with Authentication-Use triple DES encryption 
algorithm and apply MD5 or SHA-1 authentication algorithm. 
AES without Authentication-Use AES encryption algorithm 
and not apply any authentication scheme. 
AES with Authentication-Use AES encryption algorithm and 
apply MD5 or SHA-1 authentication algorithm. 

Specify mode, proposal and key life of each IKE phase, 
Gateway etc. 
The window of advance setup is shown as below: