AirLive WN-300ARM-VPN User Manual
Page 90
AirLive WN-300ARM-VPN User’s Manual
88
Settings
Setting
LAN A Gateway
LAN B Gateway
Notes
Policy Name
Example
Example
Name does not affect
operation. Select a
meaningful name.
Remote VPN
Endpoint
Fixed IP Address
60.250.158.64
Fixed IP Address
61.229.35.12
Other endpoint's WAN
(Internet) IP address.
NetBIOS
Enable
Enable
Disable if not required.
Local LAN
IP address
Mask
192.168.0.0
255.255.255.0
192.168.1.0
255.255.255.0
Local Address subnet.
Use a more restrictive
definition if possible.
Remote LAN
IP address
Mask
192.168.1.0
255.255.255.0
192.168.0.0
255.255.255.0
Remote Address subnet.
Use a more restrictive
definition if possible.
IKE
Direction Initiator
&
responder
Initiator &
responder
Does not have to match.
Either endpoint can block 1
direction.
Exchange mode
Main Mode
Main Mode
Must match
DH Group
Group 2 (1024 bit)
Group 2 (1024 bit)
Must match
Local Identity
IP address
IP address
IP address is the most
common ID method
Remote Identity
WAN IP address
WAN IP address
IP address is the most
common ID method
SA Parameters
Encryption
3DES 3DES Must
match.
Authentication
MD5 MD5 Must
match
Pre-shared
Key
123456789 123456789 Must
match;
use any string.
SA Life time
28800
28800
Does not have to match.
Shorter period will be used.
PFS
Disabled Disabled Must
match
Note:
Some VPN Gateways or programs let you specify the following settings separately for IKE and IPSec. For this
device, the same settings are used for both IKE and IPSec.
Authentication
Encryption
SA
Lifetime