User manual DRAYTEK VIGOR 2950 V4.1

[. . . ] ii Vigor2950 Series User's Guide Vigor2950 Series Dual-WAN SSL VPN Appliance User's Guide Version: 4. 1 Date: 30/10/2009 Copyright 2009 All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. The scope of delivery and other details are subject to change without prior notice. [. . . ] The result will be shown on the box. MAC Address Wake Up 94 Vigor2950 Series User's Guide 3. 9 VPN and Remote Access A Virtual Private Network (VPN) is the extension of a private network that encompasses links across shared or public networks like the Internet. In short, by VPN technology, you can send data between two computers across a shared or public network in a manner that emulates the properties of a point-to-point private link. Besides, here provides ISDN LAN to LAN and remote dial-in functions (for i model only). Below shows the menu items for VPN and Remote Access. Note: This feature can be applied for ISDN remote dial-in or ISDN LAN-to-LAN connection in i series models. 3. 9. 1 VPN Client Wizard Such wizard is used to configure VPN settings for VPN client. Such wizard will guide to set the LAN-to-LAN profile for VPN dial out connection (from server to client) step by step. LAN-to-LAN Client Mode Choose the client mode. Route Mode/NAT Mode ­ If the remote network only allows Selection you to dial in with single IP, please choose this mode, otherwise please choose Route Mode. Vigor2950 Series User's Guide 95 Please choose a LAN-to-LAN Profile There are 32 VPN profiles for users to set. When you finish the mode and profile selection, please click Next to open the following page. In this page, you have to select suitable VPN type for the VPN client profile. Different type will lead to different configuration page. After making 96 Vigor2950 Series User's Guide the choices for the client profile, please click Next. You will see different configurations based on the selection(s) you made. When you choose PPTP (None Encryption) or PPTP (Encryption), you will see the following graphic: When you choose IPSec, you will see the following graphic: When you choose L2TP, you will see the following graphic: Vigor2950 Series User's Guide 97 When you choose L2TP over IPSec (Nice to Have), you will see the following graphic: When you choose L2TP over IPSec (Must), you will see the following graphic: 98 Vigor2950 Series User's Guide Profile Name VPN Dial-Out Through Type a name for such profile. The length of the file is limited to 10 characters. Use the drop down menu to choose a proper WAN interface for this profile. This setting is useful for dial-out only. WAN1 First - While connecting, the router will use WAN1 as the first channel for VPN connection. If WAN1 fails, the router will use another WAN interface instead. WAN1 Only - While connecting, the router will use WAN1 as the only channel for VPN connection. WAN2 First - While connecting, the router will use WAN2 as the first channel for VPN connection. If WAN2 fails, the router will use another WAN interface instead. WAN2 Only - While connecting, the router will use WAN2 as the only channel for VPN connection. Always On Pre-Shared Key Check to enable router always keep VPN connection. IKE Authentication Method usually applies to those are remote dial-in user or node (LAN to LAN) which uses dynamic IP address and IPSec-related VPN connections 99 Vigor2950 Series User's Guide such as L2TP over IPSec and IPSec tunnel. Pre-Shared Key- Specify a key for IKE authentication Confirm Pre-Shared Key-Confirm the pre-shared key. Digital Signature (X. 509) Check the box of Digital Signature to invoke this function. [. . . ] Open the Command Prompt window (from Start menu> Run). Type command (for Windows 95/98/ME) or cmd (for Windows NT/ 2000/XP/Vista). The DOS command dialog will appear. 3. 4. Type ping 192. 168. 1. 1 and press [Enter]. [. . . ]