User's Manual

40
Enable NAT-Traversal (NATT)
Click to enable NAT-Traversal
Enable
Keep alive time interval of
NAT
Set alive time interval of NAT
60 s
Enable Compression
Click to enable compression
Enable
Force NATT
Click to enable force NATT
Disable
Dynamic NATT Port
Click to enable dynamic NATT port
Disable
3.6.2 IPSec Tunnels
From navigation tree, select VPN>>IPSec Tunnels, enter "IPSec Tunnels" and click <add>.
Table 3-6-2 Parameters of IPSec Tunnels
IPSec Tunnels
Function description: Configure IPSec tunnels
Parameters
Description
Default
Show Advanced Options
Click to enable advanced
options
Disable (open advanced
options after enabling)
Basic parameters
Tunnel Name
User defines tunnel name
IPSec_tunnel_1
Destination Address
Set destination IP address or
domain name
0. 0. 0. 0
Startup Modes
Select Auto
Activated/Triggered by
Data/Passive/Manually
Activated
Auto Activated
Restart WAN when failed
Click to enable
Enable
Negotiation Mode
Select main mode or
aggressive mode
Main Mode
IPSec Protocol (Advanced
Option)
Select ESP/AH
ESP
IPSec Mode (Advanced
Option)
Select tunnel
mode/transmission mode
Tunnel Mode
VPN over IPSec (Advanced
Option)
Select L2TP over IPSec/GRE
over IPSec/None
None
Tunnel Type
Select
Host-Host/Host-Subnet/Subne
t-Host/Subnet-Subnet
Subnet-Subnet
Local subnet address
Set local subnet IP address
192. 168. 2. 1
Local Subnet Mask
Set local subnet mask
255. 255. 255. 0
Peer Subnet Address
Set peer subnet IP address
0. 0. 0. 0
Peer Subnet Mask
Set remote netmask
255. 255. 255. 0
Phase I Parameters
IKE Strategy
Multiple strategies available
3DES-MD5-DH2