DSR-250N User Manual

Loading ...

D-Link DSR-Series User Manual 98

Section 7 - VPN

Field Description

Policy Name Enter a unique name for the VPN Policy. This name is not an identier for the remote WAN/client.

Policy Type

Select either Manual or Auto.

• Manual: All settings (including the keys) for the VPN tunnel are manually input for each end point. No

third-party server or organization is involved.

• Auto: Some parameters for the VPN tunnel are generated automatically. This requires using the IKE

(Internet Key Exchange) protocol to perform negotiations between the two VPN Endpoints.

IP Protocol Version Select either IPv4 or IPv6.

IKE Version Select the version of IKE.

L2TP Mode Select the L2TP mode.

IPSec Mode

Select either Tunnel or Transport. IPsec tunnel mode is useful for protecting trac between dierent

networks, when trac must pass through an intermediate, untrusted network. Tunnel mode is primarily

used for interoperability with gateways, or end-systems that do not support L2TP/IPsec or PPTP

connections. Transport mode is the default mode for IPsec, and it is used for end-to-end communications

(for example, for communications between a client and a server).

Select Local Gateway

In the event that two WAN ports are congured to connect to your ISP, select the gateway that will be used

as the local endpoint for this IPsec tunnel.

Remote Endpoint

Select the type of identier that you want to provide for the router at the remote endpoint (either IP

Address or FQDN [Fully Qualied Domain Name])

IP Address/FQDN Enter the identier for the router.

Enable Mode Cong

Toggle to ON to enable. Mode Cong is similar to DHCP and is used to assign IP addresses to the remote

VPN clients.

Enable NetBIOS Toggle to ON to allow NetBIOS broadcasts to travel over the VPN tunnel

Enable RollOver Toggle to ON to enable VPN rollover. You must have the WAN Mode set to Rollover.

Protocol Select a protocol from the drop-down menu.

Enable DHCP

Toggle to ON to allow VPN clients that are connected to your router over IPsec to receive an assigned IP

using DHCP.

Local IP/Remote IP

Select the type of identier that you want to provide for the endpoint:

• Any: Species that the policy is for trac from the given end point (local or remote). Note that

selecting Any for both local and remote end points is not valid.

• Single: Limits the policy to one host. Enter the IP address of the host that will be part of the VPN.

• Range: Allows computers within an IP address range to connect to the VPN. Enter the Start IP Address

and End IP Address in the provided elds.

• Subnet: Allows an entire subnet to connect to the VPN. Enter the network address and subnet mask

in the provided elds.

Loading ...

D-Link DSR-250N - Wireless N Unified Service Router