TP-Link Technologies Co. Ltd. TDW8950ND Manual Do Utilizador

¾

  Remote IPSec Gateway Address: Enter the destination gateway IP address in the box which is 

the public WAN IP or Domain Name of the remote VPN server endpoint. (For example: Input 
219.134.112.247 in Device1, Input 219.134.112.246 in Device 2) 

¾

  Tunnel access from local IP addresses: Choose Subnet if you want the Whole LAN to join the 

VPN network, or else choose Single Address if you want single IP to join the VPN network. 

¾

  IP Address for VPN: Enter the IP address of your LAN. (For example: Input 192.168.1.1 in 

Device1, Input 192.168.2.1 in Device2) 

¾

  IP Subnetmask: Enter the Subnet mask of your LAN. ( For example: Input 255.255.255.0 in 

both Device1 and Device2) 

¾

  Tunnel access from remote IP addresses: Choose Subnet if you want the Remote Whole LAN 

to join the VPN network, or else choose Single Address if you want single IP to join the VPN 
network. 

¾

  IP Address for VPN: Enter the IP address of the Remote LAN. ( For example: Input 

192.168.2.1 in Device1,Input 192.168.1.1 in Device2) 

¾

  IP Subnetmask: Enter the subnetmask of the remote LAN. ( For example: Input 255.255.255.0 

in both Device1 and Device2) 

¾

  Key Exchange Method: Select Auto (IKE) or Manual. 

¾

  Authentication Method: Select Pre-Shared Key (recommended) or Certificate (X.509). 

¾

  Pre-Shared Key: Input the Pre-Shared key for Authentication. (For example: Input 12345678) 

¾

  Perfect Forward Secrecy: PFS is an additional security protocol. 

We recommend you leave the Advanced Settings as default value. 

After complete the basic settings and click Save/Apply in both Device1 and Device2, PCs in LAN1 
could conmmunicate with PCs in remote LAN2. (For example: You can ping the IP address of PC2 
which is 192.168.2.100 in PC1) 

)

The VPN Servers Endpoint from both ends must use the same pre-shared keys and Perfect 
Forward Secrecy settings. 

Click Show Advanced Settings and then you can configure the Advanced Settings. 

57