User manual DRAYTEK VIGOR 2910 V4.0

[. . . ] ii Vigor2910 Series User's Guide Vigor2910 Dual-WAN Security Router User's Guide Version: 4. 0 Firmware Version: V3. 2. 4 Date: 11/05/2010 Copyright 2010 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. The scope of delivery and other details are subject to change without prior notice. [. . . ] If there is no problem, you can click one of the radio buttons listed on the page and click Finish to execute the next action. Go to the VPN Connection Click this radio button to access VPN and Remote Access>>Connection Management for viewing VPN Management Connection status. Do another VPN Server Wizard Setup View more detailed configuration Click this radio button to set another profile of VPN Server through VPN Server Wizard. Click this radio button to access VPN and Remote Access>>LAN to LAN for viewing detailed configuration. 110 Vigor2910 Series User's Guide 3. 9. 2 VPN Server Wizard Such wizard is used to configure VPN settings for VPN server. Such wizard will guide to set the LAN-to-LAN profile for VPN dial in connection (from client to server) step by step. VPN Server Mode Selection Choose the direction for the VPN server. Site to Site VPN/Remote Dial-in User ­ To set a LAN-to-LAN profile automatically, please choose Site to Site VPN. Remote Dial-in User ­You can manage remote access by maintaining a table of remote user profile, so that users can be authenticated to dial-in via VPN connection. Please choose a LAN-to-LAN Profile This item is available when you choose Site to Site VPN (LAN-to-LAN) as VPN server mode. There are 32 VPN tunnels for users to set. Vigor2910 Series User's Guide 111 Please choose a Dial-in User Accounts Allowed Dial-in Type This item is available when you choose Remote Dial-in User (Teleworker) as VPN server mode. There are 32 VPN tunnels for users to set. This item is available after you choose any one of dial-in user account profiles. Next, you have to select suitable dial-in type for the VPN server profile. There are six types provided here (similar to VPN Client Wizard). Different Dial-in Type will lead to different configuration page. After making the choices for the server profile, please click Next. You will see different configurations based on the selection you made. When you check PPTP/IPSec/L2TP (three types) or PPTP/IPSec (two types) or L2TP with Policy (Nice to Have/Must), you will see the following graphic: 112 Vigor2910 Series User's Guide Profile Name User Name Password Pre-Shared Key Type a name for such profile. The length of the file is limited to 10 characters. This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. This field is used to authenticate for connection when you select PPTP or L2TP with or without IPSec policy above. For IPSec/L2TP IPSec authentication, you have to type a pre-shared key. Confirm Pre-Shared Key Type the pre-shared key again for confirmation. Digital Signature (X. 509) In addition to pre-shared key, you can select one predefined setting in the X. 509 Peer ID Profiles (set from VPN and Remote Access>>IPSec Peer Identity) for IPSec/L2TP over IPSec authentication. Peer IP/VPN Client IP Peer ID Remote Network IP Remote Network Mask Type the WAN IP address or VPN client IP address for the remote client. Please type one LAN IP address (according to the real location of the remote host) for building VPN connection. Please type the network mask (according to the real location of the remote host) for building VPN connection. When you check PPTP/L2TP (two types) or PPTP or L2TP with Policy (None), you will see the following graphic: Vigor2910 Series User's Guide 113 When you check IPSec, you will see the following graphic: After finishing the configuration, please click Next. [. . . ] Double click on the current used MacOs on the desktop. Open the Application folder and get into Utilities. Type ping 192. 168. 1. 1 and press [Enter]. If the link is OK, the line of "64 bytes from 192. 168. 1. 1: icmp_seq=0 ttl=255 time=xxxx ms" will appear. 254 Vigor2910 Series User's Guide Vigor2910 Series User's Guide 255 5. 4 Checking If the ISP Settings are OK or Not Click WAN>> Internet Access and then check whether the ISP settings are set correctly. For PPPoE Users 1. [. . . ]