User manual D-LINK DIR-455 VERSION 1.0

[. . . ] Preface D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes. Trademarks D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies. Copyright © 2009 by D-Link Systems, Inc. This publication may not be reproduced, in whole or in part, without prior expressed written permission from D-Link Systems, Inc. D-Link DIR-455 User Manual i Table of Contents Table of Contents Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Its value can range from 300 seconds to 172, 800 seconds. Encapsulation Protocol: ESP, AH, or ESP+AH. PFS: Configures perfect forward secrecy for connections created with this IPSec transport profile by assigning a Diffie-Hellman prime modulus group. D-Link DIR-455 User Manual 36 Section 3 - Configuration PFS Group: Three groups can be selected: None, Group 1, Group 2, Group 5. Group 1: Uses a 768-bit Diffie-Hellman prime modulus group. Group 2: Uses a 1024-bit Diffie-Hellman prime modulus group. Group 5: Uses a 1536-bit Diffie-Hellman prime modulus group. Preshared Key: The first key that supports IKE mechanism of both VPN gateway and VPN client host for negotiating further security keys. The pre-shared key must be same on both VPN gateways and clients. Remote ID: The Type and the Value must be the same as the Type and the Value of the Local ID of the remote VPN gateway. Local ID: The Type and the Value must be the same as the Type and the Value of the Remote ID of the remote VPN gateway. Extended Authentication: With the xAuth feature, the VPN client (or initiator) needs to provide additional user information to remote VPN server (or VPN gateway) for extended authentication. The VPN server would reject the connect request from VPN clients because of the unknown user, even though the pre-shared key is correct. This function is suitable to remote mobile VPN clients. You can configure a VPN rule with a pre-shared key for all remote users using, but you can also designate only someone is permitted to establish VPN connection with VPN server. xAuth - None: Disables Extended Authentication (xAuth). xAuth - Server Mode: Select this checkbox if the device behaves as a VPN server, and will verify the legality of user information from VPN client. The user information that is provided by VPN client needs to match to user information that is in local user database of VPN server. You can press "XAUTH account" button to edit local user database. Please note that only VPN clients with xAuth can establish VPN connection with the device if this checkbox has been selected. Set IKE Proposal: Select this checkbox to enable IKE proposals. Set IPSec Proposal: Select this checkbox to enable IPSec proposals D-Link DIR-455 User Manual 37 Section 3 - Configuration IKE PROPOSAL SETTINGS DH Group: DH Group: Three groups can be selected: group 1 (MODP768), group 2 (MODP1024), and group 5 (MODP1536). Encryption Algorithm: Three algorithms can be selected: 3DES, DES, and AES. [. . . ] Secure your wireless network by turning on the WPA or WEP security feature on the router. Refer to product manual for detail information on how to set it up. D-Link DIR-455 User Manual 84 Appendix A - Wireless Basics Wireless Modes There are basically two modes of networking: · Infrastructure ­ All wireless clients will connect to an access point or wireless router. · Ad-Hoc ­ Directly connecting to another computer, for peer-to-peer communication, using wireless network adapters on each computer, such as two or more WNA-2330 wireless network Cardbus adapters. An Infrastructure network contains an Access Point or wireless router. [. . . ]